services:
  piauplink:
    build: .
    container_name: piauplink
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    environment:
      - PIA_USER=${PIA_USER}
      - PIA_PASS=${PIA_PASS}
      - PIA_REGIONS=nl_amsterdam,de_berlin
      - PIA_PORT_FORWARD=false
    volumes:
      - ./pia-state:/pia
    restart: unless-stopped

  whoami_behind_vpn:
    image: traefik/whoami:latest
    network_mode: service:piauplink
    depends_on:
      - piauplink
    restart: unless-stopped