# /opt/stacks/pihole/docker-compose.yml

services:
  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    ports:
      - "53:53/tcp"                       # DNS TCP — sense 127.0.0.1 (ha de ser accessible a tota la xarxa)
      - "53:53/udp"                       # DNS UDP — ídem
      - "127.0.0.1:8080:80"              # Interfície web (només local → via Nginx)
    environment:
      TZ: 'Europe/Madrid'
      WEBPASSWORD: '${PIHOLE_PASSWORD}'   # Millor via .env
      PIHOLE_DNS_: '9.9.9.9;149.112.112.112'
      DNSSEC: 'true'
      DNSMASQ_LISTENING: 'all'
    volumes:
      - pihole_config:/etc/pihole         # Volum named — més estable
      - pihole_dnsmasq:/etc/dnsmasq.d     # Volum named — més estable
    cap_add:
      - NET_ADMIN
    networks:
      - dns-net
      - shared_net

volumes:
  pihole_config:
  pihole_dnsmasq:

networks:
  dns-net:
    driver: bridge
  shared_net:
    external: true
    name: shared_net