NetSentry/docker-compose.yml at master · t3pfaffe/NetSentry · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
version: "2.1"

volumes:
  pihole_config:
  dnsmasq_config:
  unms_config:
  unifi_config:
  unifi_log:
  unifi_log2:
  unifi_run:
  unifi_run2:
  unifi_work:
  tailscale_state:

services:
  pihole:
    image: pihole/pihole:2025.10.3@sha256:7f2dff3f60615e1b9982824cab30e10d399bd1178691e13a96359ea50323db69
    # build:
    #   context: ./balena-pihole/pihole
    privileged: true
    container_name: pihole
    restart: unless-stopped
    cap_add:
      - SYS_TTY_CONFIG
      - NET_ADMIN
    dns:
      - "127.0.0.1"
      - "1.1.1.1"
    network_mode: host
    # ports:
    #   - "53:53/tcp"
    #   - "53:53/udp"
    #   - "67:67/udp"
    #   - "80:80/tcp"
    environment:
      WEB_BIND_ADDR: 0.0.0.0
      DNSMASQ_LISTENING: all
      # SET_HOSTNAME: pihole.local
      # PIHOLE_DNS_: 1.1.1.1;1.0.0.1
      # TZ: America/New_York
    volumes:
      - pihole_config:/etc/pihole/
      - dnsmasq_config:/etc/dnsmasq.d/
    tmpfs:
      - /var/log/pihole
    labels:
      io.balena.features.dbus: "1"


  # https://github.com/balenablocks/hostname
  # https://hub.balena.io/blocks/1918776/hostname-rpi
  hostname:
    image: bh.cr/g_tomas_migone1/hostname-rpi/0.2.1
    restart: no
    labels:
      io.balena.features.supervisor-api: 1
    environment:
      SET_HOSTNAME: pihole

  # https://hub.docker.com/r/tailscale/tailscale
    # https://github.com/tailscale/tailscale/blob/main/cmd/containerboot/main.go
    # https://tailscale.com/kb/1282/docker
    # https://tailscale.com/kb/1278/tailscaled
    # https://tailscale.com/kb/1241/tailscale-up
    # https://tailscale.com/kb/1242/tailscale-serve
    # https://tailscale.com/kb/1311/tailscale-funnel
  tailscale:
    image: tailscale/tailscale:v1.90.6@sha256:8eb8b450a85856807e8a216c4697333e15f8701cb6d344bed851bf6aa6a9605c
    restart: unless-stopped
    environment:
      TS_STATE_DIR: /var/lib/tailscale
      TS_SOCKET: /var/run/tailscale/tailscaled.sock
      TS_AUTHKEY: ${TAILSCALE_AUTHKEY}
      TS_USERSPACE: false
      TS_AUTH_ONCE: false
      TS_HOSTNAME: pihole
      TS_EXTRA_ARGS: --accept-dns=false --reset
    network_mode: host
    cap_add:
      - NET_ADMIN
      - NET_RAW
      - SYS_MODULE
    labels:
      io.balena.features.kernel-modules: 1
    tmpfs:
      - /tmp
      - /run
    volumes:
      - "tailscale_state:/var/lib/tailscale"
    entrypoint:
      - /bin/sh
      - -c
    command:
      - |
        modprobe tun || true
        modprobe wireguard || true
        mkdir -p /dev/net
        [ ! -c /dev/net/tun ] && mknod /dev/net/tun c 10 200
        /usr/local/bin/containerboot


  unifi:
    image: ryansch/unifi-rpi:8.4@sha256:5a27ae1608ab5331387cd4084292f299d600c8a88d8167f1c24b3bb159452058
    container_name: unifi
    restart: unless-stopped
    network_mode: host
    ports:
      - "3478:3478/udp"
      - "5514:5514"
      - "8080:8080"
      - "8443:8443"
      - "8843:8843"
      - "6789:6789"
      - "27117:27117"
      - "1900:1900/udp"
      - "10001:10001/udp"
    environment:
      JAVA_OPTS: -Xmx512M
    volumes:
      - "unifi_config:/var/lib/unifi"
      - "unifi_log:/usr/lib/unifi/logs"
      - "unifi_log2:/var/log/unifi"
      - "unifi_run:/usr/lib/unifi/run"
      - "unifi_run2:/run/unifi"
      - "unifi_work:/usr/lib/unifi/work"

  # unms:
  #   image: nico640/docker-unms:1.4.8
  #   container_name: unms
  #   restart: unless-stopped
  #   ports:
  #     - "4443:443"
  #     - "4080:80"
  #     - "2025:2025/udp"
  #   environment:
  #     # - TZ=${TIME_ZONE:-America/New_York}
  #     # - SECURE_LINK_SECRET=${UNMS_SECLINK_SECRET}
  #     - PUBLIC_HTTPS_PORT=4443
  #     - PUBLIC_WS_PORT=4443
  #   volumes:
  #     - unms_config:/config