51 lines
2.0 KiB
YAML
51 lines
2.0 KiB
YAML
services:
|
|
adguard:
|
|
image: adguard/adguardhome:latest
|
|
container_name: adguardhome
|
|
restart: unless-stopped
|
|
ports:
|
|
- "53:53/tcp"
|
|
- "53:53/udp"
|
|
- "853:853/tcp" # DNS over TLS
|
|
# - "67:67/udp" # DHCP
|
|
# - "68:68/tcp" # DHCP
|
|
# - "3000:3000/tcp"
|
|
volumes:
|
|
- ./data/work:/opt/adguardhome/work
|
|
- ./data/conf:/opt/adguardhome/conf
|
|
- ./certs:/certs:ro
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=proxy"
|
|
- "traefik.http.services.adguard.loadbalancer.server.port=3000"
|
|
|
|
# Prod Router
|
|
- "traefik.http.routers.adguard.rule=Host(`dns.forust.xyz`) || Host(`adguard.forust.xyz`)"
|
|
- "traefik.http.routers.adguard.entrypoints=websecure"
|
|
- "traefik.http.routers.adguard.middlewares=security-headers@file"
|
|
- "traefik.http.routers.adguard.tls=true"
|
|
# Local Router
|
|
- "traefik.http.routers.adguard-local.rule=Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`)"
|
|
- "traefik.http.routers.adguard-local.entrypoints=websecure"
|
|
- "traefik.http.routers.adguard-local.middlewares=security-headers@file"
|
|
- "traefik.http.routers.adguard-local.tls=true"
|
|
# Dev Router
|
|
- "traefik.http.routers.adguard-dev.rule=Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)"
|
|
- "traefik.http.routers.adguard-dev.entrypoints=websecure"
|
|
- "traefik.http.routers.adguard-dev.middlewares=security-headers@file"
|
|
- "traefik.http.routers.adguard-dev.tls=true"
|
|
# DoH Router
|
|
- "traefik.http.routers.dns.rule=(Host(`dns.forust.xyz`) && PathPrefix(`/dns-query`))"
|
|
- "traefik.http.routers.dns.entrypoints=websecure"
|
|
- "traefik.http.routers.dns.tls.certresolver=letsencrypt"
|
|
|
|
# Glance Metadata
|
|
- glance.name=adguard
|
|
- glance.url=https://adguard.forust.xyz/
|
|
- glance.description=AdGuard Home is a network-wide software for blocking ads.
|
|
networks:
|
|
- proxy
|
|
networks:
|
|
proxy:
|
|
external: true
|