services:
  adguard:
    image: adguard/adguardhome:latest
    container_name: adguardhome
    restart: unless-stopped
    environment:
      - TZ=${TZ}
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      # - "67:67/udp" # DHCP
      # - "68:68/tcp" # DHCP
    volumes:
      - ./adguardhome/work:/opt/adguardhome/work
      - ./adguardhome/conf:/opt/adguardhome/conf
    networks:
      - traefik-proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.adguard.entrypoints=web"
      - "traefik.http.routers.${ADGUARD_APPNAME:-adguard}.rule=Host(`${ADGUARD_SUBDOMEN:-adguard}.${HOST:-workstation}`)"
      - "traefik.http.routers.${ADGUARD_APPNAME:-adguard}.middlewares=adguard-redirect"
      - "traefik.http.middlewares.adguard-redirect.redirectscheme.scheme=https"

      - "traefik.http.routers.adguard-secure.entrypoints=websecure"
      - "traefik.http.routers.adguard-secure.rule=Host(`${ADGUARD_SUBDOMEN:-adguard}.${HOST:-workstation}`)"
      - "traefik.http.services.adguard-secure.loadbalancer.server.port=3000" 
      - "traefik.http.routers.adguard-secure.tls=true"
      - "traefik.http.routers.adguard-secure.tls.certresolver=le" 
networks:
  traefik-proxy:
    external: true