services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8088:80/tcp" # remove when integrated into the proxy.
    networks:
      proxy: {}
      pihole_bridge:
        ipv4_address: 192.168.100.2
        priority: 900
    env_file:
      - .env
    cap_add:
      - NET_ADMIN
      - SYS_TIME
      - SYS_NICE
    volumes:
      - pihole_data:/etc/pihole
      - pihole_dnsmasq:/etc/dnsmasq.d

  unbound:
    image: mvance/unbound:latest
    container_name: unbound
    restart: unless-stopped
    ports:
      - "5053:53/tcp"
      - "5053:53/udp"
    networks:
      pihole_bridge:
        ipv4_address: 192.168.100.3
    volumes:
      - unbound_data:/opt/unbound/etc/unbound

networks:
  pihole_bridge:
    driver: bridge
    ipam:
      config:
        - subnet: 192.168.100.0/24

  proxy:
    external: true

volumes:
  pihole_data:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/pihole"
    labels:
      dev.housh.description: "Pihole configuration data volume."

  pihole_dnsmasq:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/dnsmasq.d"
    labels:
      dev.housh.description: "Pihole dnsmasq data volume."

  unbound_data:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/unbound"
    labels:
      dev.housh.description: "Unbound data volume."