ansible/roles/stacks/composes/inventory/adguardhome.yml

69 lines
2.5 KiB
YAML
Raw Normal View History

2023-09-26 16:09:27 +00:00
# 2023-09-26
2023-09-25 08:40:20 +00:00
# Stack: adguardhome
---
adguardhome:
name: "adguardhome"
tasks:
- adguardhome.yml
ipv6: true
directories:
- "{{ stack_folder_conf }}/adguardhome/conf"
- "{{ stack_folder_datas }}/adguardhome/datas"
services:
- name: "adguardhome"
image: "adguard/adguardhome:latest"
uid: "0"
gid: "0"
privileged: true
capabilities:
- DAC_OVERRIDE
- BPF
- CHOWN
- DAC_READ_SEARCH
- FOWNER
- FSETID
- IPC_LOCK
- IPC_OWNER
- MAC_ADMIN
- MAC_OVERRIDE
- MKNOD
- NET_ADMIN
- NET_BIND_SERVICE
- NET_BROADCAST
- NET_RAW
- SETGID
- SETFCAP
- SETPCAP
- SETUID
- SYS_ADMIN
- SYS_PACCT
- SYS_PTRACE
- SYS_RAWIO
restart: "always"
ports:
- { exposed: "${VM_PORT_ADGUARDHOME}", container: "80", mode: "tcp" }
- { exposed: "3003", container: "3000", mode: "tcp" }
- { exposed: "53", container: "53", mode: "tcp" }
- { exposed: "53", container: "53", mode: "udp" }
- { exposed: "67", container: "67", mode: "udp" }
- { exposed: "784", container: "784", mode: "udp" }
- { exposed: "853", container: "853", mode: "tcp" }
- { exposed: "853", container: "853", mode: "udp" }
- { exposed: "5443", container: "5443", mode: "udp" }
- { exposed: "8853", container: "8853", mode: "udp" }
- { exposed: "68", container: "68", mode: "udp", disabled: true }
- { exposed: "443", container: "443", mode: "tcp", disabled: true }
- { exposed: "443", container: "443", mode: "udp", disabled: true }
healthcheck: 'wget --no-verbose --tries=1 --spider http://0.0.0.0:80/ || exit 1'
ressources:
2023-09-26 16:09:27 +00:00
cpu: "{{ vm_os_cpu_max }}"
memory: "{{ 1.0 if 1.0 <= vm_os_memory_max|float else vm_os_memory_max|float }}G"
tmpfs: "1G"
2023-09-25 08:40:20 +00:00
volumes:
- { local: './{{ stack_folder_conf }}/adguardhome/conf', container: '/opt/adguardhome/conf', mode: 'rw' }
- { local: './{{ stack_folder_datas }}/adguardhome/datas', container: '/opt/adguardhome/work', mode: 'rw' }