networks:
  pihole:
    driver: overlay
    attachable: true
    ipam:
      config:
        - subnet: 192.168.78.0/24
          driver: default
services:
  pihole:
    cap_add:
    - NET_ADMIN
    - SYS_TIME
    - SYS_NICE
    environment:
      FTLCONF_dns_listeningMode: all
      FTLCONF_dns_upstreams: 8.8.8.8;8.8.4.4
      FTLCONF_webserver_api_password: ${PASSWORD}
      TZ: Europe/Bratislava
    hostname: m-server
    image: pihole/pihole:latest
    networks:
      pihole:
        ipv4_address: 192.168.78.254
    ports:
    - target: 53
      published: 53
      protocol: udp
      mode: ingress
    - target: 80
      published: 9380
      protocol: tcp
      mode: ingress
    - target: 443
      published: 9343
      protocol: tcp
      mode: ingress
    volumes:
    - /share/docker_data/pihole/etc-pihole:/etc/pihole
    - /share/docker_data/pihole/etc-dnsmasq.d:/etc/dnsmasq.d
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        homepage.container: pihole
        homepage.description: Add blocker
        homepage.group: Infrastructure
        homepage.href: https://active.home.lan:9343/admin
        homepage.icon: /images/pihole.png
        homepage.name: Pihole
        homepage.server: my-docker
        homepage.weight: '1'
        homepage.widget.key: ${PASSWORD}
        homepage.widget.type: pihole
        homepage.widget.url: https://active.home.lan:9343
        homepage.widget.version: '6'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager