update

Docker-Compose/technitium/files/compose.yaml

@@ -0,0 +1,141 @@
+---
+services:
+  << service_name >>:
+    image: docker.io/technitium/dns-server:15.1.0
+    restart: << restart_policy >>
+    <%- if container_name %>
+    container_name: << container_name >>
+    <%- endif %>
+    <%- if container_hostname %>
+    hostname: << container_hostname >>
+    <%- endif %>
+    environment:
+      - DNS_SERVER_DOMAIN=<< dns_server_domain >>
+      - DNS_SERVER_ADMIN_PASSWORD=${DNS_SERVER_ADMIN_PASSWORD}
+      - DNS_SERVER_LOG_FOLDER_PATH=/var/log/technitium/dns
+      - DNS_SERVER_LOG_USING_LOCAL_TIME=<< dns_server_log_using_local_time | lower >>
+      - DNS_SERVER_RECURSION=<< dns_server_recursion >>
+      <%- if dns_server_forwarders %>
+      - DNS_SERVER_FORWARDERS=<< dns_server_forwarders >>
+      - DNS_SERVER_FORWARDER_PROTOCOL=<< dns_server_forwarder_protocol >>
+      <%- endif %>
+      <%- if dns_server_enable_blocking %>
+      - DNS_SERVER_ENABLE_BLOCKING=true
+      <%- endif %>
+      <%- if dns_server_optional_protocol_dns_over_http %>
+      - DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP=true
+      <%- endif %>
+    <%- if network_mode == 'host' %>
+    network_mode: host
+    <%- elif network_mode == 'bridge' or network_mode == 'macvlan' or traefik_enabled %>
+    networks:
+      <%- if traefik_enabled %>
+      << traefik_network >>:
+      <%- endif %>
+      <%- if network_mode == 'macvlan' %>
+      << network_name >>:
+        ipv4_address: << network_macvlan_ipv4_address >>
+      <%- elif network_mode == 'bridge' %>
+      << network_name >>:
+      <%- endif %>
+    <%- endif %>
+    <%- if not network_mode or network_mode == 'bridge' or traefik_enabled %>
+    ports:
+      <%- if not traefik_enabled %>
+      - "<< ports_web_http >>:5380/tcp"
+      - "<< ports_dns_over_https >>:443/tcp"
+      <%- if dns_server_optional_protocol_dns_over_http %>
+      - "<< ports_dns_over_http >>:80/tcp"
+      <%- endif %>
+      <%- endif %>
+      - "<< ports_dns >>:53/tcp"
+      - "<< ports_dns >>:53/udp"
+    <%- endif %>
+    volumes:
+      <%- if volume_mode == 'mount' %>
+      - << volume_mount_path >>/config:/etc/dns:rw
+      - << volume_mount_path >>/logs:/var/log/technitium/dns:rw
+      <%- else %>
+      - << service_name >>_config:/etc/dns
+      - << service_name >>_logs:/var/log/technitium/dns
+      <%- endif %>
+    <%- if network_mode != 'host' %>
+    sysctls:
+      - net.ipv4.ip_local_port_range=1024 65535
+    <%- endif %>
+    <%- if traefik_enabled %>
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=<< traefik_network >>
+      - traefik.http.services.<< service_name >>-web.loadBalancer.server.port=5380
+      - traefik.http.routers.<< service_name >>-http.service=<< service_name >>-web
+      - traefik.http.routers.<< service_name >>-http.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
+      - traefik.http.routers.<< service_name >>-http.entrypoints=<< traefik_entrypoint >>
+      <%- if traefik_tls_enabled %>
+      - traefik.http.routers.<< service_name >>-https.service=<< service_name >>-web
+      - traefik.http.routers.<< service_name >>-https.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
+      - traefik.http.routers.<< service_name >>-https.entrypoints=<< traefik_tls_entrypoint >>
+      - traefik.http.routers.<< service_name >>-https.tls=true
+      - traefik.http.routers.<< service_name >>-https.tls.certresolver=<< traefik_tls_certresolver >>
+      <%- if dns_server_optional_protocol_dns_over_http %>
+      - traefik.http.services.<< service_name >>-doh.loadBalancer.server.port=80
+      - traefik.http.routers.<< service_name >>-doh.service=<< service_name >>-doh
+      - traefik.http.routers.<< service_name >>-doh.rule=Host(`<< traefik_host >>.<< traefik_domain >>`) && Path(`/dns-query`)
+      - traefik.http.routers.<< service_name >>-doh.entrypoints=<< traefik_tls_entrypoint >>
+      - traefik.http.routers.<< service_name >>-doh.tls=true
+      - traefik.http.routers.<< service_name >>-doh.tls.certresolver=<< traefik_tls_certresolver >>
+      - traefik.http.routers.<< service_name >>-doh.priority=100
+      <%- endif %>
+      <%- endif %>
+    <%- endif %>
+<%- if network_mode == 'bridge' or network_mode == 'macvlan' or traefik_enabled %>
+
+networks:
+  <%- if network_mode == 'bridge' or network_mode == 'macvlan' %>
+  << network_name >>:
+    <%- if network_external %>
+    external: true
+    <%- else %>
+    <%- if network_mode == 'macvlan' %>
+    driver: macvlan
+    driver_opts:
+      parent: << network_macvlan_parent_interface >>
+    ipam:
+      config:
+        - subnet: << network_macvlan_subnet >>
+          gateway: << network_macvlan_gateway >>
+    name: << network_name >>
+    <%- else %>
+    driver: bridge
+    <%- endif %>
+    <%- endif %>
+  <%- endif %>
+  <%- if traefik_enabled %>
+  << traefik_network >>:
+    external: true
+  <%- endif %>
+<%- endif %>
+
+<%- if volume_mode == 'local' %>
+
+volumes:
+  << service_name >>_config:
+    driver: local
+  << service_name >>_logs:
+    driver: local
+<%- elif volume_mode == 'nfs' %>
+
+volumes:
+  << service_name >>_config:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
+      device: ":<< volume_nfs_path >>/config"
+  << service_name >>_logs:
+    driver: local
+    driver_opts:
+      type: nfs
+      o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
+      device: ":<< volume_nfs_path >>/logs"
+<%- endif %>