Alex / Plex - Docker Compose with VPN

services: vpn: container_name: plex-vpn image: jordanpotter/wireguard cap_add: - NET_ADMIN - SYS_MODULE sysctls: net.ipv4.conf.all.src_valid_mark: 1 net.ipv6.conf.all.disable_ipv6: 0 volumes: ## Your WireGuard configuration file. Can be from any provider that allows you to generate WireGuard configurations for connections (e.g. Mullvad, AirVPN). ## Or if you're running a server from another non-Hetzner provider, you can also set up WireGuard on that and use it as a VPN server. Something like this would work fine: https://github.com/Nyr/wireguard-install ## The VPN service does not need to support port forwarding. - ./my-vpn-provider.conf/etc/wireguard/vpn.conf ports: ## Expose the Plex port locally, so the host can reverse proxy it. In my case I have NGINX installed directly on the host, and I basically just: `proxy_pass http://127.0.0.1:32400;` ## If you run NGINX Proxy Manager or similar, you will likely have to figure out slightly different solution ## This will allow you to serve streaming traffic between your Plex server and your users, directly from the Hetzner server. It's only using the VPN for "calling home" from Plex media server (the software) to Plex.tv servers (the Plex company's servers). - "127.0.0.1:32400:32400" restart: unless-stopped plex: image: plexinc/pms-docker:latest container_name: plex depends_on: - vpn ## The important line, makes all network traffic for the Plex container go through the VPN container. network_mode: "service:vpn" environment: ## I don't actually remember if these are necessary lmao - PUID=1000 - PLEX_UID=1000 - PGID=1000 - PLEX_GID=1000 - VERSION=docker ## Claim token, if needed # - PLEX_CLAIM=claim-rr-blah-blah-blah volumes: ## Plex configuration/logs/etc. - ./config:/config ## Change this to where you have your media stored. - /data/media:/media restart: unless-stopped ## Expose the [i]GPU to the container. For hardware transcoding devices: - /dev/dri:/dev/dri