---
services:
  pihole:
    image: docker.io/pihole/pihole:2026.02.0 
    restart: unless-stopped
    container_name: pihole
    environment:
      - TZ=Europe/Berlin
      - FTLCONF_webserver_api_password=${WEBPASSWORD}
      - FTLCONF_misc_etc_dnsmasq_d=true
    networks:
      - frontend
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "123:123/udp"
    volumes:
      - ./pihole-dnsmasq/:/etc/dnsmasq.d/
      - pihole-pihole:/etc/pihole
    cap_add:
      - NET_ADMIN
      - SYS_TIME
    labels:
      - traefik.enable=true
      - traefik.http.services.pihole-web.loadBalancer.server.port=80
      - traefik.http.routers.pihole-https.service=pihole-web
      - traefik.http.routers.pihole-https.rule=Host(`pihole.home.sebastiangedigk.com`)
      - traefik.http.routers.pihole-https.entrypoints=websecure
      - traefik.http.routers.pihole-https.tls=true
      - traefik.http.routers.pihole-https.tls.certresolver=cloudflare

volumes:
  pihole-pihole:
    driver: local

networks:
  frontend:
    external: true