mirror of
https://github.com/10h30/wirehole-ui.git
synced 2026-06-05 15:09:48 +09:00
84 lines
2.1 KiB
YAML
84 lines
2.1 KiB
YAML
version: "3"
|
|
|
|
networks:
|
|
private_network:
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: 10.2.0.0/24
|
|
|
|
services:
|
|
unbound:
|
|
image: "mvance/unbound:latest"
|
|
container_name: unbound
|
|
restart: unless-stopped
|
|
hostname: "unbound"
|
|
volumes:
|
|
- "./unbound:/opt/unbound/etc/unbound/"
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.2.0.200
|
|
|
|
wg-easy:
|
|
depends_on: [unbound, pihole]
|
|
environment:
|
|
# ⚠️ Required:
|
|
# Change this to your host's public address
|
|
- WG_HOST= my.ddns.net
|
|
|
|
# Optional:
|
|
- PASSWORD=10h30
|
|
- WG_PORT=51822
|
|
- WG_DEFAULT_ADDRESS=10.6.0.x
|
|
- WG_DEFAULT_DNS=10.2.0.100
|
|
# - WG_ALLOWED_IPS=192.168.15.0/24, 10.0.1.0/24
|
|
|
|
image: weejewel/wg-easy
|
|
container_name: wg-easy
|
|
volumes:
|
|
- .:/etc/wireguard
|
|
ports:
|
|
- "51822:51820/udp"
|
|
- "51821:51821/tcp"
|
|
restart: unless-stopped
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
sysctls:
|
|
- net.ipv4.ip_forward=1
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
dns:
|
|
- 10.2.0.100 # Points to pihole
|
|
- 10.2.0.200 # Points to unbound
|
|
|
|
restart: unless-stopped
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.2.0.3
|
|
|
|
pihole:
|
|
depends_on: [unbound]
|
|
container_name: pihole
|
|
image: pihole/pihole:latest
|
|
restart: unless-stopped
|
|
hostname: pihole
|
|
dns:
|
|
- 127.0.0.1
|
|
- 10.2.0.200 # Points to unbound
|
|
environment:
|
|
TZ: "Asia/Hong_Kong"
|
|
WEBPASSWORD: "" # Blank password - Can be whatever you want.
|
|
ServerIP: 10.1.0.100 # Internal IP of pihole
|
|
DNS1: 10.2.0.200 # Unbound IP
|
|
DNS2: 10.2.0.200 # If we don't specify two, it will auto pick google.
|
|
# Volumes store your data between container upgrades
|
|
volumes:
|
|
- "./etc-pihole/:/etc/pihole/"
|
|
- "./etc-dnsmasq.d/:/etc/dnsmasq.d/"
|
|
# Recommended but not required (DHCP needs NET_ADMIN)
|
|
# https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
|
cap_add:
|
|
- NET_ADMIN
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.2.0.100 |