docker-compose.yml

networks:
  private_network:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.enable_icc: "true"
    attachable: true
    internal: false
    ipam:
      config:
        - subnet: 10.2.0.0/24


services:
  dnscrypt:
    image: "klutchell/dnscrypt-proxy"
    restart: unless-stopped
    container_name: dnscrypt
    volumes:
      - ./Global-Configs/DnsCrypt/dnscrypt-proxy.toml:/config/dnscrypt-proxy.toml
    networks:
      private_network:
        ipv4_address: 10.2.0.42

  unbound:
    image: "noxcis/unbound:latest"
    container_name: unbound
    restart: unless-stopped
    hostname: "unbound"
    cap_add:
      - NET_ADMIN
    healthcheck:
      test: ["CMD", "drill", "@127.0.0.1", "dnssec.works"]
      interval: 30s
      timeout: 30s
      retries: 3
      start_period: 30s 
    #volumes:
    #  - ./Global-Configs/Unbound:/etc/unbound/custom.conf.d 
    networks:
      private_network:
        ipv4_address: 10.2.0.200


  adguard:
    depends_on: [unbound]
    container_name: adguard
    image: adguard/adguardhome
    restart: unless-stopped
    hostname: adguard
    # Volumes store your data between container upgrades
    volumes:
      - "./Global-Configs/AdGuard/Data:/opt/adguardhome/work"
      - "./Global-Configs/AdGuard/Config:/opt/adguardhome/conf"
    networks:
      private_network:
        ipv4_address: 10.2.0.100
        
  darkwire:
      image: noxcis/darkwire:terra-firma
      cap_add:
        - NET_ADMIN
      sysctls:
        - net.ipv4.ip_forward=1
        - net.ipv4.conf.all.src_valid_mark=1
      networks:
        private_network:
          ipv4_address: 10.2.0.4

  wiregate:
    container_name: wiregate
    image: noxcis/wg-dashboard:${TAG}
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: unless-stopped
    volumes:
      - wgd_configs:/etc/wireguard
      - wgd_db:/opt/wireguarddashboard/src/db
      - wgd_db:/opt/wireguarddashboard/src/dashboard_config
      - ./Global-Configs/Master-Key:/opt/wireguarddashboard/src/master-key
    environment:
      - TZ={PI_HOLE_TZ}
      - WGD_TOR_EXIT_NODES=${WGD_TOR_EXIT_NODES}
      - WGD_TOR_PROXY=${WGD_TOR_PROXY}
      - WGD_TOR_PLUGIN=${WGD_TOR_PLUGIN}
      - WGD_TOR_BRIDGES=${WGD_TOR_BRIDGES}
      - WGD_WELCOME_SESSION=false
      - WGD_USER=${WGD_USER}
      - WGD_PASS=${WGD_PASS}
      - WGD_REMOTE_ENDPOINT=${WGD_REMOTE_ENDPOINT}
      - WGD_REMOTE_ENDPOINT_PORT=80
      - WGD_DNS="10.2.0.100, 10.2.0.100"
      - WGD_IPTABLES_DNS=10.2.0.100
      - WGD_PEER_ENDPOINT_ALLOWED_IP=0.0.0.0/0
      - WGD_KEEP_ALIVE=21
      - WGD_MTU=1420
      - WGD_PORT_RANGE_STARTPORT=${WGD_PORT_RANGE_STARTPORT}
    ports:
      - "${WGD_PORT_MAPPINGS}"
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
    networks:
      private_network:
        ipv4_address: 10.2.0.3





volumes:
    wgd_configs:
    wgd_db: