mirror of
https://github.com/JamesTurland/JimsGarage.git
synced 2024-11-22 07:50:19 +00:00
79 lines
2.4 KiB
YAML
79 lines
2.4 KiB
YAML
version: "3.6"
|
|
|
|
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
|
|
services:
|
|
cloudflared:
|
|
container_name: cloudflared
|
|
# Restart on crashes and on reboots
|
|
restart: unless-stopped
|
|
image: cloudflare/cloudflared:latest
|
|
command: proxy-dns
|
|
environment:
|
|
- "TUNNEL_DNS_UPSTREAM=https://1.1.1.1/dns-query,https://1.0.0.1/dns-query,https://9.9.9.9/dns-query,https://149.112.112.9/dns-query"
|
|
|
|
# Listen on an unprivileged port
|
|
- "TUNNEL_DNS_PORT=5053"
|
|
|
|
# Listen on all interfaces
|
|
- "TUNNEL_DNS_ADDRESS=0.0.0.0"
|
|
|
|
# Attach cloudflared only to the private network
|
|
networks:
|
|
pihole_internal:
|
|
ipv4_address: 172.70.9.2
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
|
|
pihole:
|
|
container_name: pihole
|
|
image: pihole/pihole:latest
|
|
ports:
|
|
- "53:53/tcp"
|
|
- "53:53/udp"
|
|
- "67:67/udp"
|
|
- "500:80/tcp"
|
|
# - "443:443/tcp"
|
|
networks:
|
|
pihole_internal:
|
|
ipv4_address: 172.70.9.3
|
|
proxy:
|
|
environment:
|
|
TZ: 'Europe/London'
|
|
WEBPASSWORD: 'password'
|
|
DNS1: '172.70.9.2#5053'
|
|
DNS2: 'no'
|
|
DNSMASQ_LISTENING: 'all'
|
|
VIRTUAL_HOST: pihole.yourdomain.com
|
|
# Volumes store your data between container upgrades
|
|
volumes:
|
|
- '/home/ubuntu/docker/pihole/:/etc/pihole/'
|
|
- '/home/ubuntu/docker/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/'
|
|
# Recommended but not required (DHCP needs NET_ADMIN)
|
|
# https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
|
#cap_add:
|
|
# - NET_ADMIN
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- cloudflared
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.pihole.entrypoints=http"
|
|
- "traefik.http.routers.pihole.rule=Host(`pihole.yourdomain.com`)"
|
|
- "traefik.http.middlewares.pihole-https-redirect.redirectscheme.scheme=https"
|
|
- "traefik.http.routers.pihole.middlewares=pihole-https-redirect"
|
|
- "traefik.http.routers.pihole-secure.entrypoints=https"
|
|
- "traefik.http.routers.pihole-secure.rule=Host(`pihole.yourdomain.com`)"
|
|
- "traefik.http.routers.pihole-secure.tls=true"
|
|
- "traefik.http.routers.pihole-secure.service=pihole"
|
|
- "traefik.http.services.pihole.loadbalancer.server.port=80"
|
|
- "traefik.docker.network=proxy"
|
|
|
|
networks:
|
|
pihole_internal:
|
|
ipam:
|
|
config:
|
|
- subnet: 172.70.9.0/29
|
|
name: pihole_internal
|
|
proxy:
|
|
external: true
|