services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    environment:
      - TZ=${TZ:-Europe/Berlin}
      - FTLCONF_webserver_api_password=${WEB_PASSWORD:-change-me}
      - FTLCONF_dns_listeningMode=all
    ports:
      - "${DNS_PORT:-53}:53/tcp"
      - "${DNS_PORT:-53}:53/udp"
      - "${HTTP_PORT:-8081}:80/tcp"
    volumes:
      - ${DATA_PATH:-/srv/pihole}/etc-pihole:/etc/pihole
    cap_add:
      # Only required when Pi-hole also serves DHCP
      - NET_ADMIN
      - SYS_TIME
      - SYS_NICE