Network
    -Disable IPV6
    -Install Bluetooth (for Bluetooth keyboard/mouse)
    -Advance to modify to static ip address.
-Softy
   - 3rd party - Docker

https://www.dynu.com/en-US/ControlPanel/APICredentials

version: '2'
services:
  jellyfin:
    image: linuxserver/jellyfin
    container_name: jellyfin
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/HongKong   
    volumes:
       - /media/usb0/your_movie_dir:/data/movies
       - /root/docker-jellyfin/etc:/config
    ports:
      - 8096:8096
    expose:
      - 8096
    restart: unless-stopped

  portainer:
    image: portainer/portainer
    container_name: portainer
    command: -H unix:///var/run/docker.sock
    restart: always
    ports:
      - 9000:9000
      - 8000:8000
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data

volumes:
  portainer_data:

FROM ubuntu:latest as builder
RUN apt-get update
RUN apt-get install curl -y
RUN curl -L -o /tmp/go.sh https://install.direct/go.sh
RUN chmod +x /tmp/go.sh
RUN /tmp/go.sh

FROM alpine:latest

COPY --from=builder /usr/bin/v2ray/v2ray /usr/bin/v2ray/
COPY --from=builder /usr/bin/v2ray/v2ctl /usr/bin/v2ray/
COPY --from=builder /usr/bin/v2ray/geoip.dat /usr/bin/v2ray/
COPY --from=builder /usr/bin/v2ray/geosite.dat /usr/bin/v2ray/

RUN set -ex && \
    apk --no-cache add ca-certificates bash curl  && \
    mkdir /var/log/v2ray/ &&\
    chmod +x /usr/bin/v2ray/v2ctl && \
    chmod +x /usr/bin/v2ray/v2ray

ENV PATH /usr/bin/v2rayPATH

CMD ["v2ray", "-config=/etc/v2ray/v2ray.json"]

FROM alpine

# Install packages
RUN apk add --update --no-cache \
    lighttpd \
    lighttpd-mod_webdav \
    openssl \
    bash \
    curl && \
    rm -rf /var/cache/apk/*

COPY htdocs/index.html /var/www/localhost/htdocs/

HEALTHCHECK --interval=3m --timeout=5s \
  CMD curl -f http://localhost/ || exit 1

ENTRYPOINT ["lighttpd", "-D", "-f","/etc/lighttpd/lighttpd.conf"]

FROM ubuntu:latest
RUN apt-get update && apt-get -y install unzip gnutls-bin bash iptables curl oc$
    echo "Asia/Shanghai" > /etc/timezone

WORKDIR /etc/ocserv

COPY etc/entrypoint.sh /entrypoint.sh

ENTRYPOINT ["/entrypoint.sh"]
VOLUME /etc/ocserv/
CMD ["ocserv","-d 10", "-c", "/etc/ocserv/ocserv.conf", "-f"]

FROM haproxy:alpine

RUN set -exo pipefail \
    && apk add --no-cache \
        rsyslog curl bash \
    && mkdir -p /etc/rsyslog.d \
    && touch /var/log/haproxy.log \
    && ln -sf /dev/stdout /var/log/haproxy.log

# Include our custom entrypoint that will the the job of lifting
# rsyslog alongside haproxy.
COPY ./etc/docker-entrypoint.sh /
COPY ./etc/rsyslog.conf /etc/rsyslog.d/

# Set our custom entrypoint as the image's default entrypoint
ENTRYPOINT ["/docker-entrypoint.sh"]

CMD ["-f", "/etc/haproxy/haproxy.cfg"]

global
        maxconn 2000
        log 127.0.0.1 local0 warning

defaults
        log global
        mode tcp
        option tcplog
        option        dontlognull
        retries 3
      
frontend www-https
   bind :::443
   tcp-request inspect-delay 5s
   tcp-request content capture req.ssl_sni len 20
   acl tls req.ssl_hello_type 1
   use_backend server-web if tls { req.ssl_sni -i yourserver.dynu.net }
   default_backend server-vpn

backend server-vpn
        mode tcp
        option ssl-hello-chk
        server ocserv ocserv:4443 send-proxy-v2         

backend server-web
        server server-web lighttpd:2443 check

version: '2'
services:
  ocserv:
    image: yourname/ocserv
    container_name: ocserv
    volumes:
      - /root/docker-ocserv/etc:/etc/ocserv
      - /root/docker-ocserv/ssl:/etc/ocserv/ssl:ro
    ports:
      - 4443:4443
    expose:
      - 4443
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    restart: always

  v2ray:
    image: yourname/v2ray
    container_name: v2ray
    volumes:
      - /root/docker-v2ray/etc:/etc/v2ray:rw
    ports:
      - 8443:8443
    expose:
      - 8443
    restart: always

  lighttpd:
    image: yourname/lighttpd
    depends_on:
      - v2ray
    container_name: lighttpd
    volumes:
      - /root/docker-lighttpd/etc:/etc/lighttpd:ro
      - /root/docker-lighttpd/ssl:/ssl:ro
      - /root/docker-lighttpd/htdocs:/var/www/localhost/htdocs
    ports:
      - 2443:2443
      - 80:80
    expose:
      - 2443
      - 80
    restart: always

  haproxy:
    image: yourname/haproxy
    depends_on:
      - lighttpd
    container_name: haproxy
    volumes:
      - /root/docker-haproxy/etc/haproxy.cfg:/etc/haproxy/haproxy.cfg:ro
    ports:
      - 443:443
    expose:
      - 443
    restart: always

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf