Go to: https://github.com/geekau/media-stack

Download the full "media-stack" repository to your computer by selecting "Code" --> "Download Zip"

Extract the downloaded zip file, then go to the directory which suits your deployment method

Follow the deployment instructions at: https://MediaStack.Guide

The Docker applications and services across the different directories / deployments are all extactly the same, however they differ on which Docker containers are secured via VPN for Internet traffic, and whether the MediaStack applications are deployed individually (per file), or collectively as a group (single file).

• All Docker containers send external Internet traffic routed through the Gluetun VPN container, to maximise overall network encryption
• Each Docker container is deployed separately, using its own individual docker-compose deployment file
• Gluetun VPN container must be deployed first, as it sets up the network stack and the VPN connection for all other containers to use

• All Docker containers send external Internet traffic routed through the Gluetun VPN container, to maximise overall network encryption
• All Docker containers are deployed collectively, with all applications sharing a single docker-compose deployment file
• The network stack and VPN connection are set up as the complete Docker environment is deployed

• Only the qBittorrent container sends external Internet traffic routed through the Gluetun VPN container, to maximise overall network efficiency
• Each Docker container is deployed separately, using its own individual docker-compose deployment file
• Gluetun VPN container must be deployed first, as it sets up the network stack and the VPN connection for all other containers to use

• Only the qBittorrent container sends external Internet traffic routed through the Gluetun VPN container, to maximise overall network efficiency
• All Docker containers are deployed collectively, with all applications sharing a single docker-compose deployment file
• The network stack and VPN connection are set up as the complete Docker environment is deployed

NOTE: You can swap between the different deployments as / whenever you need, however you will need to ensure any configuration settings made in the docker-compose.env file, are copied into the new deployment folder.

Regardless of which deployment you chose above, all incoming Internet traffic still goes through Cloudflare DNS and Zero Trust Network Access services, so the network configuration for SWAG (reverse proxy / application gateway), Authelia, Heimdall and DDNS-Updater applications are not configured to use the Gluetun VPN, as Cloudflare will proxy your inbound Internet traffic directly to your IP Address / Internet connection. SWAG is build to secure all inbound network traffic from the Internet, refer to https://MediaStack.Guide for instructions on setting up Internet access to your internal Docker environment.

The following table shows which applications do, and do not, use the secure VPN connection, depending on the deployment method you initially choose.

Must = Container MUST always connect via VPN container
Never = Container should NEVER connect via VPN container

1. Download the full "media-stack" repository to your computer

2. Extract the downloaded zip file, then go to the directory which suits your deployment method

3. Update settings in docker-compose.env to suit your VPN account, local networking, and location of Docker Configuration Files / Media Storage

4. Deploy all Docker containers - If deploying containers individually, the Gluetun VPN container must be deployed first

5. Import "MediaStack.Guide Applications" bookmarks into your web browser to easily access each WebUI portal

See you at: https://MediaStack.Guide