diff --git a/netstack b/netstack
new file mode 100644
index 0000000..4610a6f
--- /dev/null
+++ b/netstack
@@ -0,0 +1,113 @@
+services:
+  nginxproxymanager:
+    cpu_shares: 90
+    command: []
+    container_name: nginxproxymanager
+    hostname: nginxproxymanager
+    image: jc21/nginx-proxy-manager:latest
+    labels:
+      icon: https://cdn.jsdelivr.net/gh/IceWhaleTech/CasaOS-AppStore@main/Apps/NginxProxyManager/icon.png
+    ports:
+      - target: 80
+        published: "80"
+        protocol: tcp
+      - target: 443
+        published: "443"
+        protocol: tcp
+      - target: 81
+        published: "81"
+        protocol: tcp
+    restart: unless-stopped
+    volumes:
+      - type: bind
+        source: /DATA/AppData/nginxproxymanager/data
+        target: /data
+      - type: bind
+        source: /DATA/AppData/nginxproxymanager/etc/letsencrypt
+        target: /etc/letsencrypt
+  cloudflare-ddns:
+    cpu_shares: 90
+    command: []
+    container_name: cloudflare-ddns
+    environment:
+      - API_KEY=eXw0Obu0GRKlGtTYJJLO6IBBuXozHpS2jZxrmFmn
+      - PROXIED=false
+      - SUBDOMAIN=ddns
+      - ZONE=nicoswebsite.net
+    hostname: cloudflare-ddns
+    image: oznu/cloudflare-ddns:latest
+    restart: always
+    ports: []
+    volumes: []
+    devices: []
+    cap_add: []
+    network_mode: bridge
+    privileged: false
+  pihole:
+    cap_add:
+      - NET_ADMIN
+    cpu_shares: 90
+    command: []
+    container_name: pihole
+    environment:
+      - FTLCONF_dns_listeningMode=all
+      - FTLCONF_webserver_api_password=Rem1ember!
+      - TZ=America/New York
+    hostname: pihole
+    image: pihole/pihole:latest
+    labels:
+      icon: https://cdn.jsdelivr.net/gh/IceWhaleTech/CasaOS-AppStore@main/Apps/Pihole/icon.png
+    ports:
+      - target: 80
+        published: "8800"
+        protocol: tcp
+      - target: 53
+        published: "53"
+        protocol: tcp
+      - target: 53
+        published: "53"
+        protocol: udp
+      - target: 443
+        published: "8443"
+        protocol: tcp
+    restart: unless-stopped
+    volumes:
+      - type: bind
+        source: /DATA/AppData/pihole/etc/pihole/
+        target: /etc/pihole
+  nebula-sync:
+    image: ghcr.io/lovelaze/nebula-sync:latest
+    container_name: nebula-sync
+    environment:
+      - PRIMARY=http://10.1.21.100:8800|Rem1ember!
+      - REPLICAS=http://10.1.21.99|Rem1ember!,http://10.1.21.14:8800|Rem1ember!
+      - FULL_SYNC=true
+      - RUN_GRAVITY=true
+      - CRON=0 * * * *
+    restart: unless-stopped
+
+  flame:
+    cpu_shares: 90
+    command: []
+    container_name: flame
+    environment:
+      - PASSWORD=Rem1ember!
+      - TZ=America/New York
+    hostname: flame
+    image: pawelmalak/flame:latest
+    ports:
+      - target: 5005
+        published: "5005"
+        protocol: tcp
+    restart: unless-stopped
+    volumes:
+      - type: bind
+        source: /DATA/AppData/flame
+        target: /app/data
+      - type: bind
+        source: /var/run/docker.sock
+        target: /var/run/docker.sock
+    devices: []
+    cap_add: []
+    network_mode: bridge
+    privileged: false