services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    hostname: pihole
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "127.0.0.1:53:53/tcp"
      - "127.0.0.1:53:53/udp"
      - "${WG_GUEST_IP}:53:53/tcp"
      - "${WG_GUEST_IP}:53:53/udp"
      - "${WG_ADMIN_IP}:53:53/tcp"
      - "${WG_ADMIN_IP}:53:53/udp"
    environment:
      TZ: ${TZ}
      WEBPASSWORD: ${WEBPASSWORD}
      PIHOLE_DNS_: ${PIHOLE_DNS_}
      DNSMASQ_LISTENING: all
      FTLCONF_dns_listeningMode: all
      FTLCONF_misc_etc_dnsmasq_d: 'true'
    networks:
      - proxy_net
      - dns_net
    volumes:
      - pihole_data:/etc/pihole
      - ./pihole_dnsmasq:/etc/dnsmasq.d
    depends_on:
      - unbound
    cap_add:
      - NET_ADMIN
  unbound:
    image: mvance/unbound:latest
    container_name: unbound
    restart: unless-stopped
    networks:
      - dns_net
networks:
  proxy_net:
    external: true
  dns_net:
    external: true
volumes:
  pihole_data:
  pihole_dnsmasq: