ice.yml

version: '3'
networks:
  ice:
    driver: bridge
    ipam:
        config:
        - subnet: 10.1.1.0/24

services:
  pihole:
    container_name: pihole
    hostname: pihole
    image: pihole/pihole:2024.07.0
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.2
    ports:
      - '53:53/tcp'
      - '53:53/udp'
      - '8080:80/tcp'
    environment:
      TZ: 'Europe/Vienna'
      WEBPASSWORD: '${PIHOLE_PASSWORD}'
      PIHOLE_DNS_: '10.1.1.3#53'
      DHCP_ACTIVE: true
      DHCP_START: 192.168.86.21
      DHCP_END: 192.168.86.250
      DHCP_ROUTER: 192.168.86.1
      PIHOLE_DOMAIN: 'home'
      WEBTHEME: 'default-light'
    volumes:
      - '${HOST_ROOT}/pihole/:/etc/pihole/'
      - '${HOST_ROOT}/dnsmasq/:/etc/dnsmasq.d/'
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    depends_on:
      - unbound
      - dhcphelper

  dhcphelper:
    container_name: dhcphelper
    network_mode: "host"
    hostname: dhcphelper
    image: homeall/dhcphelper:latest
    logging:
      driver: journald
    environment:
      IP: '10.1.1.2'
      TZ: 'Europe/Vienna'
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    
  unbound:
    container_name: unbound
    hostname: unbound
    image: klutchell/unbound:1.20.0
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.3
    ports:
      - 5053:53
    volumes:
      - ${HOST_ROOT}/unbound/custom.conf.d/:/etc/unbound/custom.conf.d/
      - ${HOST_ROOT}/unbound/unbound.conf/:/etc/unbound/unbound.conf
    restart: unless-stopped

  prometheus:
    container_name: prometheus
    hostname: prometheus
    image: prom/prometheus:v2.52.0
    logging:
      driver: journald
    volumes:
      - ${HOST_ROOT}/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
    networks:
      ice:
        ipv4_address: 10.1.1.4
    ports:
      - 9090:9090
    depends_on:
      - node-exporter

  node-exporter:
    container_name: node-exporter
    hostname: node-exporter
    image: prom/node-exporter:v1.8.0
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.5
    ports:
      - 9100:9100
    pid: host
    volumes:
      - /:/host:ro,rslave
    command:
      - '--path.rootfs=/host'

  grafana:
    container_name: grafana
    hostname: grafana
    image: grafana/grafana:10.4.2
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.6
    ports:
      - 3000:3000
    user: '$UID:$GID'
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
    volumes:
      - ${HOST_ROOT}/grafana/data:/var/lib/grafana
      - ${HOST_ROOT}/grafana/provisioning:/etc/grafana/provisioning
    restart: unless-stopped
    depends_on:
      - loki
      - prometheus

  nginx:
    container_name: nginx
    hostname: nginx
    image: nginx:stable-alpine3.19
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.7
    ports:
      - "80:80"
    volumes:
      - '${HOST_ROOT}/nginx/html:/usr/share/nginx/html'
    restart: always

  diun:
    container_name: diun
    hostname: diun
    image: crazymax/diun:4.28
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.9
    command: serve
    volumes:
      - '${HOST_ROOT}/diun/data:/data'
      - '${HOST_ROOT}/diun/diun.yml:/config/diun.yml'
      - '/var/run/docker.sock:/var/run/docker.sock'
    environment:
      TZ: 'Europe/Vienna'
      LOG_LEVEL: 'info'
      CONFIG: '/config/diun.yml'
      DIUN_NOTIF_DISCORD_WEBHOOKURL: '${DISCORD_WEBHOOKURL}'
      DIUN_NOTIF_DISCORD_RENDERFIELDS: true
      DIUN_NOTIF_DISCORD_TIMEOUT: '10s'
      DIUN_NOTIF_DISCORD_TEMPLATEBODY: 'Docker tag {{ .Entry.Image }} has been released.'
    labels:
      - 'diun.enable=true'
    restart: always
    depends_on:
      - loki
      - pihole
      - unbound
      - grafana
      - nginx
      - node-exporter
      - prometheus
      - wg-easy

  loki:
    container_name: loki
    hostname: loki
    image: grafana/loki:2.9.8
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.10
    ports:
      - 3100:3100
    volumes:
      - '${HOST_ROOT}/loki/local-config.yaml:/etc/loki/local-config.yaml'
    command: -config.file=/etc/loki/local-config.yaml -log.level=warn

  promtail:
    container_name: promtail
    hostname: promtail
    image: grafana/promtail:2.9.8
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.11
    ports:
      - 9080:9080
    volumes:
      - /var/log:/var/log
      - /var/lib:/var/lib
      - '${HOST_ROOT}/promtail/config.yml:/etc/promtail/config.yml'
    command: -config.file=/etc/promtail/config.yml
    depends_on:
      - loki

  wg-easy:
    container_name: wg-easy
    hostname: wg-easy
    image: ghcr.io/wg-easy/wg-easy
    logging:
      driver: journald
    networks:
      ice:
        ipv4_address: 10.1.1.12
    environment:
      - PORT=51821
      - WG_PORT=51820
      - LANG=en
      - WG_HOST=${WG_PUBLIC_IP}
      - PASSWORD=${WG_PASSWORD}
      - WG_DEFAULT_DNS=10.1.1.2   
    volumes:
      - '${HOST_ROOT}/wireguard/config:/etc/wireguard'
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1