services:
  pihole:
    cap_add:
    - NET_ADMIN
    - SYS_TIME
    - SYS_NICE
    environment:
      FTLCONF_dns_listeningMode: all
      FTLCONF_dns_upstreams: 8.8.8.8;8.8.4.4
      FTLCONF_webserver_api_password: ${PASSWORD}
      TZ: Europe/Bratislava
    hostname: m-server
    image: pihole/pihole:latest
    ports:
    - 53:53
    - 9380:80
    - 9343:443
    volumes:
    - pihole-etc:/etc/pihole
    - pihole-dnsmasq.d:/etc/dnsmasq.d
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        homepage.container: pihole
        homepage.description: Add blocker
        homepage.group: Infrastructure
        homepage.href: https://active.home.lan:9343/admin
        homepage.icon: /images/pihole.png
        homepage.name: Pihole
        homepage.server: my-docker
        homepage.weight: '1'
        homepage.widget.key: ${PASSWORD}
        homepage.widget.type: pihole
        homepage.widget.url: https://active.home.lan:9343
        homepage.widget.version: '6'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
volumes:
  pihole-etc:
  pihole-dnsmasq.d: