services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8081:80/tcp" # Web UI — 80/443 stay free for NPM
    environment:
      TZ: Europe/Vienna
      # Answer clients from other VLANs, not just the local subnet.
      FTLCONF_dns_listeningMode: "all"
      # Admin password is set with `docker exec -it pihole pihole setpassword`,
      # not here.
    volumes:
      - ./etc-pihole:/etc/pihole