services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: always   
    hostname: pihole
    domainname: local
    shm_size: 256m
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8081:80/tcp" # http port
    environment:
      TZ: 'America/Chicago'
      PIHOLE_UID: 1001
      PIHOLE_GID: 1001
      FTLCONF_dns_listeningMode: 'ALL'    # required so Pi-hole listens on the macvlan network. You will not be able to change 'Listen on all interfaces, permit all origins' in the UI
      IGNORE_LOCALHOST: 'true'            # Ignore container's own queries in logs
      FTLCONF_dhcp_ipv6: 'false'
      FTLCONF_webserver_api_password: ${WEB_PWD} #API password (works for API calls)
      WEBPASSWORD: ${WEB_PWD}
    labels:
      - homepage.group=Network
      - homepage.name=Pihole
      - homepage.icon=pi-hole
      - homepage.href=${PIHOLE_URL}
      - homepage.description=Media server
      - homepage.widget.type=pihole
      - homepage.widget.url=${PIHOLE_API_URL}
      - homepage.widget.key=${WEB_PWD}
      - homepage.widget.version=6
      - homepage.widget.fields=["queries", "blocked", "blocked_percent", "gravity"]
      - dockhand.url=${PIHOLE_URL}
    volumes:
      - /srv/docker/network/pihole:/etc/pihole
    cap_add:
      - NET_ADMIN
      - CAP_SYS_TIME 
      - CAP_SYS_NICE