version: "3"
services:
  dnscrypt:
    container_name: dnscrypt-proxy
    image: klutchell/dnscrypt-proxy
    security_opt:
      - no-new-privileges:true
    networks:
      custom-bridge:
        ipv4_address: 10.0.1.2
    expose:
      - 5053/udp
      - 5053/tcp
    env_file: .env
    volumes:
      - ${DNSCRYPT_CONFIG:-/home/docker/pihole+dnscrypt/dnscrypt}:/config
    dns:
      - 185.222.222.222 # https://dns.sb/privacy/
      - 45.11.11.11
    restart: unless-stopped

  pihole:
    container_name: pihole
    image: pihole/pihole
    security_opt:
      - no-new-privileges:true
    networks:
      custom-bridge:
        ipv4_address: 10.0.1.3
    ports:
      - ${PIHOLE_DNS_PORT:-53}:53/tcp
      - ${PIHOLE_DNS_PORT:-53}:53/udp
      - ${PIHOLE_DHCP_PORT:-67}:67/udp
      - ${PIHOLE_WEBUI_PORT:-80}:80/tcp
    env_file: .env
    volumes:
      - ${PIHOLE_CONFIG:-/home/docker/pihole+dnscrypt/pihole}:/etc/pihole/
      - ${PIHOLE_DNSMASQD:-/home/docker/pihole+dnscrypt/dnsmasq.d}:/etc/dnsmasq.d/
    dns:
      - 185.222.222.222 # https://dns.sb/privacy
      - 45.11.11.11
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    depends_on:
      - dnscrypt

networks:
  custom-bridge:
    name: custom-bridge
    driver: bridge
    ipam:
      config:
        - subnet: 10.0.1.0/24