services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: always   
    hostname: pihole
    domainname: local
    shm_size: 256m
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8081:80/tcp" # http port
    environment:
      TZ: 'America/Chicago'
      PIHOLE_UID: 1001
      PIHOLE_GID: 1001
      FTLCONF_dns_listeningMode: 'ALL'    # required so Pi-hole listens on the macvlan network. You will not be able to change 'Listen on all interfaces, permit all origins' in the UI
      IGNORE_LOCALHOST: 'true'            # Ignore container's own queries in logs
      FTLCONF_dhcp_ipv6: 'false'
      FTLCONF_webserver_api_password: {WEB_PWD} #API password (works for API calls)
      WEBPASSWORD: ${WEB_PWD}
    volumes:
      - /srv/docker/server/pihole:/etc/pihole
    cap_add:
      - NET_ADMIN
      - CAP_SYS_TIME 
      - CAP_SYS_NICE