version: "3.9"

services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    network_mode: "host"          # nötig für DHCP (Port 67/UDP)
    cap_add:
      - NET_ADMIN                 # erlaubt DHCP
    restart: unless-stopped
    environment:
      TZ: "Europe/Berlin"
      WEBPASSWORD: "Milchtaube05"
      PIHOLE_DNS_: "1.1.1.1;1.0.0.1"
      DNSMASQ_LISTENING: "all"
      # DHCP einschalten (Bereich an dein Netz anpassen)
      DHCP_ACTIVE: "true"
      DHCP_START: "192.168.1.100"
      DHCP_END: "192.168.1.200"
      DHCP_ROUTER: "192.168.1.1"
      DHCP_LEASETIME: "24"
      FTLCONF_LOCAL_IPV4: "192.168.1.10"   # IP des Hosts im LAN
    volumes:
      - ./etc-pihole:/etc/pihole
      - ./etc-dnsmasq.d:/etc/dnsmasq.d
    healthcheck:
      test: ["CMD-SHELL", "dig +short @127.0.0.1 pi.hole || exit 1"]
      interval: 1m
      timeout: 10s
      retries: 3