From c4203eb308d10274133c9dd9e23647030460a714 Mon Sep 17 00:00:00 2001
From: nkozobrod <kozobrod@gmail.com>
Date: Sat, 30 May 2026 12:07:08 +0000
Subject: [PATCH] Clean: remove app data, keep only compose config

---
 .gitignore          |  9 +++++++++
 docker-compose.yaml | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 docker-compose.yaml

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..12560fb
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,9 @@
+# Secrets
+.env
+
+# Application data
+qbittorrent/
+
+# OS
+.DS_Store
+Thumbs.db
diff --git a/docker-compose.yaml b/docker-compose.yaml
new file mode 100644
index 0000000..df67448
--- /dev/null
+++ b/docker-compose.yaml
@@ -0,0 +1,32 @@
+services:
+  qbittorrent:
+    image: lscr.io/linuxserver/qbittorrent:latest
+    container_name: qbittorrent
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Moscow
+      - WEBUI_PORT=8080
+    volumes:
+      - ./qbittorrent/config:/config
+      - ./qbittorrent/downloads:/downloads
+    networks:
+      - traefik_proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.qbittorrent.rule=Host(`qbit.kzbrd.ru`)"
+      - "traefik.http.routers.qbittorrent.entrypoints=websecure" # Используем HTTPS entrypoint
+      - "traefik.http.routers.qbittorrent.tls=true"
+      - "traefik.http.routers.qbittorrent.tls.certresolver=myresolver" # Используем единый резолвер
+      - "traefik.http.services.qbittorrent.loadbalancer.server.port=8080"
+      # Дополнительные security headers
+      - "traefik.http.routers.qbittorrent.middlewares=qbittorrent-headers"
+      - "traefik.http.middlewares.qbittorrent-headers.headers.sslredirect=true"
+      - "traefik.http.middlewares.qbittorrent-headers.headers.stsincludesubdomains=true"
+      - "traefik.http.middlewares.qbittorrent-headers.headers.stspreload=true"
+      - "traefik.http.middlewares.qbittorrent-headers.headers.stsseconds=31536000"
+    restart: unless-stopped
+
+networks:
+  traefik_proxy:
+    external: true
\ No newline at end of file