Starr server on docker (radarr, sonarr, PLEX, TRAEFIK, *arr)

A compose file for a Docker Stack with several *arr services:

• ​Radarr (172.20.0.8:7878)
• Sonarr (172.20.0.10:8989)
• Prowlarr (172.20.0.4:9696)
• Overseerr (172.20.0.12:5055)
• Bazarr (172.20.0.11:6767)
• Recyclarr
• Tautulli (172.20.0.14:8181)
• FlareSolverr (172.20.0.2:8191)

I had to install Plex outside Docker because Plex for Docker doesn't support NVidia or Intel hardware acceleration.
I use WatchTower for automatically update  every container. 

name: Starr

x-service: &defserv
  restart: unless-stopped
  logging:
    driver: json-file
  network_mode: bridge
  environment:
    - PUID=1000
    - PGID=1000
    - UMASK=002
    - TZ=Brazil/East
  volumes:
    - /etc/localtime:/etc/localtime:ro

services:
  radarr:
    <<: *defserv
    depends_on:
      - prowlarr
    container_name: radarr
    image: cr.hotio.dev/hotio/radarr
    volumes:
      - radarr:/config
      - torrents:/media/sea
    networks:
      nt:
        ipv4_address: 172.20.0.8
    ports:
      - 7878:7878

  sonarr:
    <<: *defserv
    depends_on:
      - prowlarr
    container_name: sonarr
    image: cr.hotio.dev/hotio/sonarr
    volumes:
      - sonarr:/config
      - torrents:/media/sea
    networks:
      nt:
        ipv4_address: 172.20.0.10
    ports:
      - 8989:8989

  bazarr:
    <<: *defserv
    depends_on:
      - radarr
      - sonarr
    container_name: bazarr
    image: cr.hotio.dev/hotio/bazarr
    volumes:
      - bazarr:/config
      - torrents:/media/sea
    networks:
      nt:
        ipv4_address: 172.20.0.11
    ports:
      - 6767:6767

  prowlarr:
    <<: *defserv
    depends_on:
      - flaresolverr
    container_name: prowlarr
    image: lscr.io/linuxserver/prowlarr:develop
    volumes:
      - prowlarr:/config
    networks:
      nt:
        ipv4_address: 172.20.0.4
    ports:
      - 9696:9696

  overseerr:
    <<: *defserv
    depends_on:
      - radarr
      - sonarr
      - tautulli
    container_name: overseerr
    image: sctx/overseerr
    volumes:
      - overseerr:/app/config
    networks:
      nt:
        ipv4_address: 172.20.0.12
    ports:
      - 5055:5055
    labels:
      - traefik.enable=true
      - traefik.http.routers.rtrover.entrypoints=web,websecure
      - traefik.http.routers.rtrover.rule=Host(`x1.alves.pro.br`)
      - traefik.http.routers.rtrover.tls=true
      - traefik.http.routers.rtrover.tls.certresolver=lets
      - traefik.http.routers.rtrover.service=overseerr
      - traefik.http.services.overseerr.loadbalancer.server.port=5055

  traefik:
    <<: *defserv
    depends_on:
      - overseerr
    container_name: traefik
    image: traefik:v2.8
    command:
#      - "--log.level=DEBUG"
      - "--global.sendAnonymousUsage"
      - "--entrypoints.websecure.address=:443"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--api=false"
      - "--api.insecure=false"
      - "--providers.docker=true"
      - "--providers.docker.network=starr_nt"
      - "--providers.docker.exposedbydefault=false"
      - "[email protected]"
      - "--certificatesresolvers.lets.acme.storage=/home/acme.json"
      - "--certificatesresolvers.lets.acme.dnschallenge=true"
      - "--certificatesresolvers.lets.acme.dnschallenge.provider=cloudflare"
      - "--certificatesresolvers.lets.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
#      - "--certificatesresolvers.lets.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
    secrets:
      - cloudflare
    environment:
      - CF_DNS_API_TOKEN_FILE=/run/secrets/cloudflare
    networks:
      nt:
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./acme:/home"

  plex:
    <<: *defserv
    image: plexinc/pms-docker
#    image: lscr.io/linuxserver/plex:latest
    container_name: plex
    environment:
      - VERSION=docker
      - NVIDIA_DISABLE_REQUIRE=1
    networks:
      nt:
        ipv4_address: 172.20.0.32
    ports:
      - 32400:32400
    volumes:
      - plex:/config
      - torrents:/media/sea
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities: [gpu]
    labels:
      - traefik.enable=true
      - traefik.http.routers.rtrplex.entrypoints=web,websecure
      - traefik.http.routers.rtrplex.rule=Host(`x2.alves.pro.br`)
      - traefik.http.routers.rtrplex.tls=true
      - traefik.http.routers.rtrplex.tls.certresolver=lets
      - traefik.http.routers.rtrplex.service=plex
      - traefik.http.services.plex.loadbalancer.server.port=32400

  flaresolverr:
    <<: *defserv
    container_name: flaresolverr
    image: ghcr.io/flaresolverr/flaresolverr
    environment:
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - LOG_HTML=${LOG_HTML:-false}
      - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
    networks:
      nt:
        ipv4_address: 172.20.0.2
    ports:
      - "${PORT:-8191}:8191"

  tautulli:
    <<: *defserv
    container_name: tautulli
    image: ghcr.io/tautulli/tautulli
    volumes:
      - tautulli:/config
    networks:
      nt:
        ipv4_address: 172.20.0.14
    ports:
      - 8181:8181

  heimdall:
    <<: *defserv
    image: lscr.io/linuxserver/heimdall:latest
    container_name: heimdall
    volumes:
      - ./config-heimdall:/config
    networks:
      nt:
        ipv4_address: 172.20.0.100
    ports:
      - 877:877
      - 878:878

volumes:
  bazarr:
  overseerr:
  plex:
  prowlarr:
  radarr:
  recyclarr:
  sonarr:
  tautulli:
  torrents:
    driver_opts:
      type: cifs
      o: addr=192.168.111.111,username=XXX,password=XXX,file_mode=0777,dir_mode=0777
      device: //192.168.111.111/sea/Torrents
networks:
  nt:
    ipam:
      config:
        - subnet: 172.20.0.0/16
secrets:
  cloudflare:
    file: ./cloudflare.txt

Watchtower

# Command line for Docker on Linux
docker run --name watchtower2 --rm -e TZ=Brazil/East -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower --run-once --cleanup --include-stopped --rolling-restart

# Windows desktop shortcut
C:\Windows\System32\cmd.exe /c "docker run --name watchtower2 --rm -e TZ=Brazil/East -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower --run-once --cleanup --include-stopped --rolling-restart" & pause