docker-compose.yml

version: "3"

networks:
  web:
    name: web
    driver: bridge
    ipam:
      config:
        - subnet: 172.30.0.0/16

services:
  traefik:
    container_name: traefik
    image: traefik:latest
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      web:
        ipv4_address: 172.30.0.2
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./config/traefik/static.yml:/etc/traefik/traefik.yml:ro
      - ./config/traefik/dynamic.yml:/etc/traefik/dynamic.yml:ro
      - ./certs:/etc/certs:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro

  portainer:
    container_name: portainer
    image: portainer/portainer-ce:latest
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      web:
        ipv4_address: 172.30.0.3
    labels:
      traefik.enable: true
      traefik.http.routers.portainer.rule: Host(`portainer.at.home`)
      traefik.http.routers.portainer.tls: true
      traefik.http.routers.portainer.entrypoints: websecure
      traefik.http.services.portainer.loadbalancer.server.port: 9000
    volumes:
      - ./data/portainer:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro

  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    hostname: pihole
    environment:
      TZ: America/New_York
      WEBPASSWORD: admin
      PIHOLE_DNS_: 1.1.1.1;1.0.0.1
      DNSMASQ_LISTENING: all
    networks:
      web:
        ipv4_address: 172.30.0.4
    ports:
      - 53:53/tcp
      - 53:53/udp
    labels:
      traefik.enable: true
      traefik.http.routers.pihole.rule: Host(`pihole.at.home`)
      traefik.http.routers.pihole.tls: true
      traefik.http.routers.pihole.entrypoints: websecure
      traefik.http.services.pihole.loadbalancer.server.port: 80
    volumes:
      - ./data/pihole/etc-pihole:/etc/pihole
      - ./data/pihole/etc-dnsmasq.d:/etc/dnsmasq.d