# 2023-09-25
# Stack: adguardhome
---

adguardhome:
  name: "adguardhome"
  tasks:
    - adguardhome.yml
  ipv6: true

  directories:
    - "{{ stack_folder_conf }}/adguardhome/conf"
    - "{{ stack_folder_datas }}/adguardhome/datas"

  services:

    - name: "adguardhome"
      image: "adguard/adguardhome:latest"
      uid: "0"
      gid: "0"
      privileged: true
      capabilities:
        - DAC_OVERRIDE
        - BPF
        - CHOWN
        - DAC_READ_SEARCH
        - FOWNER
        - FSETID
        - IPC_LOCK
        - IPC_OWNER
        - MAC_ADMIN
        - MAC_OVERRIDE
        - MKNOD
        - NET_ADMIN
        - NET_BIND_SERVICE
        - NET_BROADCAST
        - NET_RAW
        - SETGID
        - SETFCAP
        - SETPCAP
        - SETUID
        - SYS_ADMIN
        - SYS_PACCT
        - SYS_PTRACE
        - SYS_RAWIO
      restart: "always"
      ports:
        - { exposed: "${VM_PORT_ADGUARDHOME}",    container: "80",    mode: "tcp" }
        - { exposed: "3003",                      container: "3000",  mode: "tcp" }
        - { exposed: "53",                        container: "53",    mode: "tcp" }
        - { exposed: "53",                        container: "53",    mode: "udp" }
        - { exposed: "67",                        container: "67",    mode: "udp" }
        - { exposed: "784",                       container: "784",   mode: "udp" }
        - { exposed: "853",                       container: "853",   mode: "tcp" }
        - { exposed: "853",                       container: "853",   mode: "udp" }
        - { exposed: "5443",                      container: "5443",  mode: "udp" }
        - { exposed: "8853",                      container: "8853",  mode: "udp" }
        - { exposed: "68",                        container: "68",    mode: "udp",    disabled: true }
        - { exposed: "443",                       container: "443",   mode: "tcp",    disabled: true }
        - { exposed: "443",                       container: "443",   mode: "udp",    disabled: true }
      healthcheck: 'wget --no-verbose --tries=1 --spider http://0.0.0.0:80/ || exit 1'
      ressources:
        cpus: "4.0"
        memory: 1G
      tmpfs: 1G
      volumes:
        - { local: './{{ stack_folder_conf }}/adguardhome/conf',      container: '/opt/adguardhome/conf',   mode: 'rw' }
        - { local: './{{ stack_folder_datas }}/adguardhome/datas',    container: '/opt/adguardhome/work',   mode: 'rw' }