split gluetun instances

systems/palatine-hill/docker/torr.nix

@@ -42,6 +42,8 @@ in
         "--dns=9.9.9.9"
       ];
     };
+
+    # temp instance
     qbitVPN = qbitBase // {
       # webui port is 8081, torr port is 39274
       networks = [
@@ -57,6 +59,29 @@ in
         "/etc/localtime:/etc/localtime:ro"
       ];
     };
+    gluetun-qbit = {
+      image = "qmcgaw/gluetun:v3";
+      capabilities = {
+        NET_ADMIN = true;
+      };
+      devices = [
+        "/dev/net/tun:/dev/net/tun"
+      ];
+      ports = [
+        "8081:8081"
+        "8083:8083"
+      ];
+      environment = {
+        TZ = "America/New_York";
+        # SOPS prep
+      };
+      environmentFiles = [
+        config.sops.secrets."docker/gluetun".path
+        config.sops.secrets."docker/gluetun-qbitvpn".path
+      ];
+    };
+
+    # permanent instance
     qbitPerm = qbitBase // {
       # webui port is 8083, torr port is 29434
       networks = [
@@ -72,7 +97,7 @@ in
         "/etc/localtime:/etc/localtime:ro"
       ];
     };
-    gluetun-qbit = {
+    gluetun-qbitperm = {
       image = "qmcgaw/gluetun:v3";
       capabilities = {
         NET_ADMIN = true;
@@ -81,15 +106,7 @@ in
         "/dev/net/tun:/dev/net/tun"
       ];
       ports = [
-        # qbitvpn
-        "8081:8081"
-        "39274:39274"
-        "39274:39274/udp"
-
-        # qbitperm
         "8083:8083"
-        "29433:24933"
-        "29433:24933/udp"
       ];
       environment = {
         TZ = "America/New_York";
@@ -97,6 +114,7 @@ in
       };
       environmentFiles = [
         config.sops.secrets."docker/gluetun".path
+        config.sops.secrets."docker/gluetun-qbitperm".path
       ];
     };
   };
@@ -104,7 +122,22 @@ in
   sops.secrets = {
     "docker/gluetun" = {
       owner = "docker-service";
-      restartUnits = [ "docker-gluetun-qbit.service" ];
+      restartUnits = [
+        "docker-gluetun-qbit.service"
+        "docker-gluetun-qbitperm.service"
+      ];
+    };
+    "docker/gluetun-qbitvpn" = {
+      owner = "docker-service";
+      restartUnits = [
+        "docker-gluetun-qbit.service"
+      ];
+    };
+    "docker/gluetun-qbitperm" = {
+      owner = "docker-service";
+      restartUnits = [
+        "docker-gluetun-qbitperm.service"
+      ];
     };
   };
 }