services:
  
  nginxproxymanager:
    container_name: nginxproxymanager
    hostname: nginxproxymanager
    image: jc21/nginx-proxy-manager:latest
    ports:
      - target: 80
        published: "80"
        protocol: tcp
      - target: 443
        published: "443"
        protocol: tcp
      - target: 81
        published: "81"
        protocol: tcp
    restart: unless-stopped
    volumes:
      - type: bind
        source: /DATA/AppData/nginxproxymanager/data
        target: /data
      - type: bind
        source: /DATA/AppData/nginxproxymanager/etc/letsencrypt
        target: /etc/letsencrypt
        
  cloudflare-ddns-1:
    container_name: cloudflare-ddns-2
    environment:
      - API_KEY=eXw0Obu0GRKlGtTYJJLO6IBBuXozHpS2jZxrmFmn
      - PROXIED=false
      - SUBDOMAIN=ddns
      - ZONE=nicoswebsite.net
    hostname: cloudflare-ddns
    image: oznu/cloudflare-ddns:latest
    restart: always
    network_mode: bridge
    privileged: false

  pihole:
    cap_add:
      - NET_ADMIN
    container_name: pihole
    environment:
      - FTLCONF_dns_listeningMode=all
      - FTLCONF_webserver_api_password=Rem1ember!
      - TZ=America/New York
    hostname: pihole
    image: pihole/pihole:latest
    ports:
      - target: 80
        published: "8800"
        protocol: tcp
      - target: 53
        published: "53"
        protocol: tcp
      - target: 53
        published: "53"
        protocol: udp
      - target: 443
        published: "8443"
        protocol: tcp
    restart: unless-stopped
    volumes:
      - type: bind
        source: /DATA/AppData/pihole/etc/pihole/
        target: /etc/pihole

  nebula-sync:
    image: ghcr.io/lovelaze/nebula-sync:latest
    container_name: nebula-sync
    environment:
      - PRIMARY=http://10.1.21.100:8800|Rem1ember!
      - REPLICAS=http://10.1.21.99|Rem1ember!,http://10.1.21.14:8800|Rem1ember!
      - FULL_SYNC=true
      - RUN_GRAVITY=true
      - CRON=0 * * * *
    restart: unless-stopped

  flame:
    container_name: flame
    environment:
      - PASSWORD=Rem1ember!
      - TZ=America/New York
    hostname: flame
    image: pawelmalak/flame:latest
    ports:
      - target: 5005
        published: "5005"
        protocol: tcp
    restart: unless-stopped
    volumes:
      - type: bind
        source: /DATA/AppData/flame
        target: /app/data
      - type: bind
        source: /var/run/docker.sock
        target: /var/run/docker.sock
    network_mode: bridge
    privileged: false