2023-12-25 18:22:22 +00:00
|
|
|
# vi: ft=yaml
|
|
|
|
|
version: "3.8"
|
|
|
|
|
|
|
|
|
|
networks:
|
|
|
|
|
traefik:
|
|
|
|
|
external: true
|
|
|
|
|
pihole:
|
|
|
|
|
|
|
|
|
|
volumes:
|
|
|
|
|
data:
|
|
|
|
|
driver_opts:
|
|
|
|
|
type: "nfs"
|
2024-01-01 12:16:11 +00:00
|
|
|
o: "addr=lewis.dmz,nolock,soft,rw"
|
|
|
|
|
device: ":/mnt/data/nfs/pihole/data"
|
2023-12-25 18:22:22 +00:00
|
|
|
dnsmasq:
|
|
|
|
|
driver_opts:
|
|
|
|
|
type: "nfs"
|
2024-01-01 12:16:11 +00:00
|
|
|
o: "addr=lewis.dmz,nolock,soft,rw"
|
|
|
|
|
device: ":/mnt/data/nfs/pihole/dnsmasq"
|
2023-12-25 18:22:22 +00:00
|
|
|
|
|
|
|
|
services:
|
|
|
|
|
pihole:
|
|
|
|
|
image: pihole/pihole:latest
|
|
|
|
|
ports:
|
|
|
|
|
- "53:53/tcp"
|
|
|
|
|
- "53:53/udp"
|
|
|
|
|
network_mode: "host"
|
|
|
|
|
environment:
|
|
|
|
|
TZ: 'Europe/Amsterdam'
|
|
|
|
|
WEBPASSWORD: {{ pihole_password }}
|
|
|
|
|
PIHOLE_DNS_: '192.168.30.1'
|
|
|
|
|
volumes:
|
|
|
|
|
- type: volume
|
|
|
|
|
source: data
|
|
|
|
|
target: /etc/pihole
|
|
|
|
|
volume:
|
|
|
|
|
nocopy: true
|
|
|
|
|
- type: volume
|
|
|
|
|
source: dnsmasq
|
|
|
|
|
target: /etc/dnsmasq.d
|
|
|
|
|
volume:
|
|
|
|
|
nocopy: true
|
|
|
|
|
networks:
|
|
|
|
|
- traefik
|
|
|
|
|
deploy:
|
|
|
|
|
labels:
|
|
|
|
|
- traefik.enable=true
|
|
|
|
|
- traefik.http.routers.pihole.entrypoints=localsecure
|
|
|
|
|
- traefik.http.routers.pihole.rule=Host(`pihole.kun.is`)
|
|
|
|
|
- traefik.http.routers.pihole.tls=true
|
|
|
|
|
- traefik.http.routers.pihole.tls.certresolver=letsencrypt
|
|
|
|
|
- traefik.http.routers.pihole.service=pihole
|
|
|
|
|
- traefik.http.services.pihole.loadbalancer.server.port=80
|
|
|
|
|
- traefik.docker.network=traefik
|
|
|
|
|
placement:
|
|
|
|
|
constraints:
|
|
|
|
|
- node.role == manager
|
