services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8088:80/tcp"
    network_mode: host
    env_file:
      - .env
    security_opt:
      - no-new-privileges:true
    cap_add:
      - NET_ADMIN
      - CAP_SYS_TIME
    volumes:
      - pihole_data:/etc/pihole
      - pihole_dnsmasq:/etc/dnsmasq.d

  unbound:
    image: mvance/unbound:latest
    container_name: unbound
    restart: unless-stopped
    ports:
      - "5053:53/tcp"
      - "5053:53/udp"
    network_mode: host
    volumes:
      - unbound_data:/opt/unbound/etc/unbound

volumes:
  pihole_data:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/pihole"
    labels:
      dev.housh.description: "Pihole configuration data volume."

  pihole_dnsmasq:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/dnsmasq.d"
    labels:
      dev.housh.description: "Pihole dnsmasq data volume."

  unbound_data:
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${NFS_ADDR},nolock,soft,rw"
      device: "${NFS_MNT}/unbound"
    labels:
      dev.housh.description: "Unbound data volume."