mirror of
https://github.com/10h30/wirehole-ui.git
synced 2026-06-05 15:09:48 +09:00
Ubuntu
87 lines
2.1 KiB
YAML
87 lines
2.1 KiB
YAML
version: "3"
|
|
|
|
networks:
|
|
private_network:
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: 10.1.0.0/24
|
|
|
|
services:
|
|
unbound:
|
|
image: "mvance/unbound:latest"
|
|
container_name: unbound
|
|
restart: unless-stopped
|
|
ports:
|
|
- "53/tcp"
|
|
- "53/udp"
|
|
volumes:
|
|
- "./unbound:/opt/unbound/etc/unbound/"
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.1.0.200
|
|
|
|
wireguard:
|
|
depends_on: [unbound, pihole]
|
|
image: linuxserver/wireguard
|
|
container_name: wireguard
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
environment:
|
|
- PUID=1000
|
|
- PGID=1000
|
|
- TZ=America/Los_Angeles
|
|
# - SERVERURL=wireguard.domain.com #optional
|
|
- SERVERPORT=51820 #optional
|
|
- PEERS=1 #optional - How many peers to generate for you (clients)
|
|
- PEERDNS=10.1.0.100 # Set it to point to pihole
|
|
- INTERNAL_SUBNET=10.6.0.0
|
|
|
|
volumes:
|
|
- ./wireguard:/config
|
|
- /lib/modules:/lib/modules
|
|
ports:
|
|
- "51820:51820/udp"
|
|
dns:
|
|
- 10.1.0.100
|
|
sysctls:
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
restart: unless-stopped
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.1.0.3
|
|
|
|
pihole:
|
|
depends_on: [unbound]
|
|
container_name: pihole
|
|
image: pihole/pihole:latest
|
|
restart: unless-stopped
|
|
privileged: true
|
|
ports:
|
|
- "53:53/tcp"
|
|
- "53:53/udp"
|
|
# - "67:67/udp" # Uncomment for pihole dhcp
|
|
- "80:80/tcp"
|
|
- "443:443/tcp"
|
|
dns:
|
|
- 127.0.0.1
|
|
- 10.1.0.200 # Points to unbound
|
|
environment:
|
|
TZ: "America/Los_Angeles"
|
|
WEBPASSWORD: "" # Blank password - Can be whatever you want.
|
|
ServerIP: 10.1.0.100
|
|
DNS1: 10.1.0.200 # Unbound IP
|
|
DNS2: 10.1.0.200 # If we don't specify two, it will auto pick google.
|
|
# Volumes store your data between container upgrades
|
|
volumes:
|
|
- "./etc-pihole/:/etc/pihole/"
|
|
- "./etc-dnsmasq.d/:/etc/dnsmasq.d/"
|
|
# Recommended but not required (DHCP needs NET_ADMIN)
|
|
# https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
|
cap_add:
|
|
- NET_ADMIN
|
|
networks:
|
|
private_network:
|
|
ipv4_address: 10.1.0.100
|