version: '3'
services:
  nginx:
    container_name: "{{nginx.host}}"
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    networks:
      net: {}
    ports:
      - '{{nginx.endpoints.http}}:80'
      - '{{nginx.endpoints.https}}:443'
      - '{{nginx.endpoints.admin}}:81'
    volumes:
      - "{{nginx.paths.data}}:/data"
      - "{{nginx.paths.letsencrypt}}:/etc/letsencrypt"
      - '/var/run/docker.sock:/var/run/docker.sock'


  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    depends_on:
      - nginx
    networks:
      net: {}
    ports:
      - "53:53/tcp"
      - "53:53/udp"
    environment:
      - "WEBPASSWORD={{ vault.pi.pihole.password }}"
      - "ServerIP=192.168.20.11"
      - "INTERFACE=eth0"
      - "DNS1=1.1.1.1"
      - "DNS1=1.0.0.1"
    volumes:
      - "/etc/localtime:/etc/localtime:ro"
      - "{{ pihole_config }}:/etc/pihole/"
      - "{{ pihole_dnsmasq }}:/etc/dnsmasq.d/"
    dns:
      - 127.0.0.1
      - 1.1.1.1
    cap_add:
      - NET_ADMIN

  {{ gitea.runner.host }}:
    container_name: {{ gitea.runner.host }}
    image: gitea/act_runner:nightly
    restart: unless-stopped
    depends_on:
      - nginx
    networks:
      - net
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - {{ gitea.runner.volumes.data }}:/data
    environment:
      - "GITEA_INSTANCE_URL={{ gitea.url }}"
      - "GITEA_RUNNER_REGISTRATION_TOKEN={{ gitea.runner.token }}"

networks:
  net:
    driver: bridge
    ipam:
#      driver: default
      config:
        - subnet: 172.16.69.0/24
          gateway: 172.16.69.1