2023-01-27 18:20:12 +01:00
|
|
|
version: '3.7'
|
|
|
|
|
services:
|
|
|
|
|
pihole:
|
|
|
|
|
image: cbcrowe/pihole-unbound:latest
|
2023-01-27 19:28:42 +01:00
|
|
|
ports:
|
|
|
|
|
- 53:53/tcp
|
|
|
|
|
- 53:53/udp
|
|
|
|
|
- 45677:80
|
|
|
|
|
environment:
|
|
|
|
|
- TZ=Europe/Paris
|
|
|
|
|
- WEBPASSWORD=z9w1r0FvKKvuLdXIygDlhidUhinERhOKZTBJtOXCMaFLi1dZvh0f2vsy9miDqsFu
|
|
|
|
|
- WEBTHEME=default-dark
|
|
|
|
|
- REV_SERVER=false
|
|
|
|
|
- PIHOLE_DNS_=127.0.0.1#5335
|
|
|
|
|
- DNSSEC=true
|
|
|
|
|
- DNSMASQ_LISTENING=all
|
|
|
|
|
- FTLCONF_REPLY_ADDR4=192.168.1.220
|
|
|
|
|
- FTLCONF_RATE_LIMIT=0/0
|
|
|
|
|
- FTL_CMD=debug
|
|
|
|
|
- DNSMASQ_USER=root
|
|
|
|
|
volumes:
|
|
|
|
|
- /mnt/nfs/pihole/config:/etc/pihole
|
|
|
|
|
- /mnt/nfs/pihole/dnsmasq.d:/etc/dnsmasq.d
|
|
|
|
|
networks:
|
|
|
|
|
- external
|
2023-01-27 18:20:12 +01:00
|
|
|
deploy:
|
|
|
|
|
mode: replicated
|
|
|
|
|
replicas: 1
|
|
|
|
|
restart_policy:
|
|
|
|
|
condition: any
|
|
|
|
|
max_attempts: 3
|
2023-01-27 19:28:42 +01:00
|
|
|
labels:
|
|
|
|
|
- "traefik.enable=true"
|
|
|
|
|
- "traefik.http.routers.pihole.rule=Host(`pihole.bxl.bhasher.com`)"
|
|
|
|
|
- "traefik.http.routers.pihole.entrypoints=internalsecure"
|
|
|
|
|
- "traefik.http.services.pihole.loadbalancer.server.port=80"
|
|
|
|
|
- "traefik.http.routers.pihole.tls=true"
|
|
|
|
|
- "traefik.http.routers.pihole.tls.certresolver=http"
|
2023-02-03 23:48:45 +01:00
|
|
|
placement:
|
|
|
|
|
constraints:
|
|
|
|
|
- node.labels.POWER == true
|
|
|
|
|
depends_on:
|
|
|
|
|
- system_traefik
|
|
|
|
|
- system_nfs
|
2023-01-27 19:28:42 +01:00
|
|
|
|
|
|
|
|
networks:
|
|
|
|
|
external:
|
|
|
|
|
external: true
|
