First Push

docker-compose.yml_swarm

@@ -0,0 +1,68 @@
+version: '3.9'
+
+# I use nfs in my swarm so this is the config for nfs volumes.
+# If you would rather use local volumes just remove the lines under pihole-data: and pihole-unbound: in the volumes section.
+volumes:
+  pihole-data:
+    driver: local
+    driver_opts:
+      type: "nfs"
+      o: "addr=<nfs-server-ip>,soft,rw"
+      device: ":/mnt/<nfs-directory>/PiHole/pihole-data/_data/"
+  pihole-unbound:
+    driver: local
+    driver_opts:
+      type: "nfs"
+      o: "addr=<nfs-server-ip>,soft,rw"
+      device: ":/mnt/<nfs-directory>/PiHole/pihole-unbound/_data/"
+
+services:
+  app:
+    image: <your built image>
+    hostname: Pihole
+    volumes:
+      - type: volume
+        source: pihole-data
+        target: /etc/pihole
+        # volume:
+          # nocopy: true
+      - type: volume
+        source: pihole-unbound
+        target: /etc/unbound
+        # volume:
+          # nocopy: true
+      - /etc/localtime:/etc/localtime:ro
+      - type: tmpfs
+        target: /dev/shm
+        tmpfs:
+          size: 2048000000
+    ports:
+      # I use host for the dns port to ensure my router can get to it directly without any docker bridge.                                             
+      # This allows my known host file on my router to forward domain names for local machines to Pihole.
+      - target: 53
+        published: 53
+        protocol: tcp
+        mode: host
+      - target: 53
+        published: 53
+        protocol: udp
+        mode: host
+      - "443:443/tcp"
+      # - 53:53/tcp
+      # - 53:53/udp
+      - "80:80/tcp" #Allows use of different port to access pihole web interface when other docker containers use port 80
+      # - 5335:5335/tcp # Uncomment to enable unbound access on local server
+      # - 22/tcp # Uncomment to enable SSH
+    environment:
+      TZ: <your-timezone>
+      FTLCONF_webserver_api_password: '<password>'
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+      placement:
+        constraints:
+	# Whatever constraints you need. (I have 2 vms that use high availability on proxmox so i assign this service to them to
+	# ensure pihole is always up.
+          - node.labels.HA == true