services:
        haproxy:
                ports:
                        https:
                                - 443
                        tcp:
                                - 2202  # Gitea SSH
                                #- 64738 # Mumble
                                #- 25565 # Minecraft 
                public:
                        # These are load balanced, it doesn't matter what IP they point to
                        - {domain: "dev-stats", service: "grafana", httpchk: true}
                        - {domain: "dev-gitea", service: "gitea", httpchk: true}
                        - {domain: "dev-transmission", service: "transmission", httpchk: false}
                        - {domain: "dev-sd", service: "seedown", httpchk: true}
        unbound:
                internal:
                        local:
                                SRV:
                                        - {service: "gitea", port: 3200, group: "git"}
                                        - {service: "seedown", port: 8082, group: "seedbox"}
                                        - {service: "transmission", port: 8081, group: "seedbox"}
                                        - {service: "grafana", port: 3000, group: "monitoring"}
                                CNAME:
                                        - {service: "postgres", host: "n0"}
                                        - {service: "redis", host: "n0"}
                                        - {service: "influxdb", host: "n0"}
                        remote:
                                - {service: "homepage", port: "80", domain: "rxhome.s3-website.eu-central-1.amazonaws.com."}
        grafana:
                domain: "dev-stats.redxen.eu"
                port: 3000
        postgres:
                host: "postgres.redxen.localhost"
                port: 5432
        redis:
                host: "redis.redxen.localhost"
                port: 6379
        gitea:
                user: "git"
                domain: "dev-gitea.redxen.eu"
                port: 
                        http: 3200
                        ssh: 2442
        mumble:
                configpath: '/etc/mumble-server.ini'
                port: 6400
                register:
                        host: "redxen.eu"
                        url: "redxen.eu"
        transmission:
                root_dir: "/mnt/seedbox" # TODO: Use mount UUIDs
                port:
                        peer: 51413
                        rpc: 8081
        darkhttpd:
                path: "/etc/darkhttpd"
        influxdb:
                port: 8086
        tor:
                listen:
                        socks:
                                addr: "127.0.0.1"
                                port: 9050
                        http:
                                addr: "127.0.0.1"
                                port: 7050
        wireguard:
                interface: 'wg0'
                port: 51820
                net:
                        v4:
                                addr: "172.22.12"
                                range:
                                        serv: 24
                                        clnt: 32
                        v6:
                                addr: "fd86:ea04:1115:"
                                range:
                                        serv: 120
                                        clnt: 128
                peers:
                        - { bit: 2, pubkey: "Xb+ASR5NdnIB+dXWEA4H0V3d0LC0KocKeFeQDyqDqjk=" }
                        - { bit: 3, pubkey: "kz9vLMnPtfka11n1EJpzHb4966ieJSo4BU1P2joHLXo=" }
                        - { bit: 10, pubkey: "wpjMlhrcv173ER7rZ0KrmaqahcqZA/fm3ovpaGlRIRo=" }
                        - { bit: 12, pubkey: "2FRcncz/oSmqFQLrHqICi4fEkgxrCeS9P8TTv5gcfCw=" }
                        - { bit: 14, pubkey: "XYUXzDDXzo1uDadvJ8YW5X/ISCZSyu10d35i7mb0pAY=" }