69 lines
2.5 KiB
YAML
69 lines
2.5 KiB
YAML
# 2023-09-26
|
|
# Stack: adguardhome
|
|
---
|
|
|
|
adguardhome:
|
|
name: "adguardhome"
|
|
tasks:
|
|
- adguardhome.yml
|
|
ipv6: true
|
|
|
|
directories:
|
|
- "{{ stack_folder_conf }}/adguardhome/conf"
|
|
- "{{ stack_folder_datas }}/adguardhome/datas"
|
|
|
|
services:
|
|
|
|
- name: "adguardhome"
|
|
image: "adguard/adguardhome:latest"
|
|
uid: "0"
|
|
gid: "0"
|
|
privileged: true
|
|
capabilities:
|
|
- DAC_OVERRIDE
|
|
- BPF
|
|
- CHOWN
|
|
- DAC_READ_SEARCH
|
|
- FOWNER
|
|
- FSETID
|
|
- IPC_LOCK
|
|
- IPC_OWNER
|
|
- MAC_ADMIN
|
|
- MAC_OVERRIDE
|
|
- MKNOD
|
|
- NET_ADMIN
|
|
- NET_BIND_SERVICE
|
|
- NET_BROADCAST
|
|
- NET_RAW
|
|
- SETGID
|
|
- SETFCAP
|
|
- SETPCAP
|
|
- SETUID
|
|
- SYS_ADMIN
|
|
- SYS_PACCT
|
|
- SYS_PTRACE
|
|
- SYS_RAWIO
|
|
restart: "always"
|
|
ports:
|
|
- { exposed: "${VM_PORT_ADGUARDHOME}", container: "80", mode: "tcp" }
|
|
- { exposed: "3003", container: "3000", mode: "tcp" }
|
|
- { exposed: "53", container: "53", mode: "tcp" }
|
|
- { exposed: "53", container: "53", mode: "udp" }
|
|
- { exposed: "67", container: "67", mode: "udp" }
|
|
- { exposed: "784", container: "784", mode: "udp" }
|
|
- { exposed: "853", container: "853", mode: "tcp" }
|
|
- { exposed: "853", container: "853", mode: "udp" }
|
|
- { exposed: "5443", container: "5443", mode: "udp" }
|
|
- { exposed: "8853", container: "8853", mode: "udp" }
|
|
- { exposed: "68", container: "68", mode: "udp", disabled: true }
|
|
- { exposed: "443", container: "443", mode: "tcp", disabled: true }
|
|
- { exposed: "443", container: "443", mode: "udp", disabled: true }
|
|
healthcheck: 'wget --no-verbose --tries=1 --spider http://0.0.0.0:80/ || exit 1'
|
|
ressources:
|
|
cpu: "{{ vm_os_cpu_max }}"
|
|
memory: "{{ 1.0 if 1.0 <= vm_os_memory_max|float else vm_os_memory_max|float }}G"
|
|
tmpfs: "1G"
|
|
volumes:
|
|
- { local: './{{ stack_folder_conf }}/adguardhome/conf', container: '/opt/adguardhome/conf', mode: 'rw' }
|
|
- { local: './{{ stack_folder_datas }}/adguardhome/datas', container: '/opt/adguardhome/work', mode: 'rw' }
|