version: "3.7"
services:
  pia:
    image: qmcgaw/private-internet-access
    container_name: pia
    cap_add:
      - NET_ADMIN
    network_mode: bridge
    init: true
    ports:
      - 8888:8888/tcp
      - 8388:8388/tcp
      - 8388:8388/udp
    # command:
    environment:
      # More variables are available, see the readme table
      - VPNSP=pia
      - USER=js89ds7
      - PROTOCOL=udp
      - OPENVPN_VERBOSITY=1
      - OPENVPN_ROOT=no
      - OPENVPN_TARGET_IP=
      - TZ=

      # PIA only
      - REGION=CA Montreal
      - PASSWORD=8fd9s239G
      - PIA_ENCRYPTION=strong
      - PORT_FORWARDING=off

      # Mullvad only
      - COUNTRY=Sweden
      - CITY=
      - ISP=
      - PORT=

      # DNS over TLS
      - DOT=on
      - DOT_PROVIDERS=cloudflare
      - DOT_IPV6=on
      - DOT_VERBOSITY=1
      - BLOCK_MALICIOUS=on
      - BLOCK_SURVEILLANCE=off
      - BLOCK_ADS=off
      - UNBLOCK=
      # Firewall
      - EXTRA_SUBNETS=
      # Shadowsocks
      - SHADOWSOCKS=off
      - SHADOWSOCKS_PASSWORD=
      # Tinyproxy
      - TINYPROXY=off
      - TINYPROXY_USER=
      - TINYPROXY_PASSWORD=
    restart: always