---
services:
  << service_name >>:
    image: docker.io/adguard/adguardhome:v0.107.74
    restart: << restart_policy >>
    <%- if network_mode == 'host' %>
    network_mode: host
    <%- elif network_mode == 'bridge' or network_mode == 'macvlan' or traefik_enabled %>
    networks:
      <%- if traefik_enabled %>
      << traefik_network >>:
      <%- endif %>
      <%- if network_mode == 'macvlan' %>
      << network_name >>:
        ipv4_address: << network_macvlan_ipv4_address >>
      <%- elif network_mode == 'bridge' %>
      << network_name >>:
      <%- endif %>
    <%- endif %>
    <%- if not network_mode or network_mode == 'bridge' or traefik_enabled %>
    ports:
      <%- if not traefik_enabled %>
      - "<< ports_http >>:80/tcp"
      - "<< ports_https >>:443/tcp"
      <%- endif %>
      <%- if initial_setup %>
      - "<< ports_initial >>:3000/tcp"
      <%- endif %>
      - "<< ports_https >>:443/udp"
      - "<< ports_dns >>:53/tcp"
      - "<< ports_dns >>:53/udp"
      - "<< ports_tls >>:853/tcp"
      - "<< ports_dnscrypt >>:5443/tcp"
      - "<< ports_dnscrypt >>:5443/udp"
    <%- endif %>
    volumes:
      <%- if volume_mode == 'mount' %>
      - << volume_mount_path >>/work:/opt/adguardhome/work:rw
      - << volume_mount_path >>/conf:/opt/adguardhome/conf:rw
      <%- else  %>
      - << service_name >>_work:/opt/adguardhome/work
      - << service_name >>_conf:/opt/adguardhome/conf
      <%- endif %>
    cap_add:
      - NET_ADMIN
      - NET_BIND_SERVICE
      - NET_RAW
    <%- if traefik_enabled %>
    labels:
      - traefik.enable=true
      - traefik.docker.network=<< traefik_network >>
      - traefik.http.services.<< service_name >>_web.loadBalancer.server.port=80
      - traefik.http.routers.<< service_name >>_web_http.service=<< service_name >>_web
      - traefik.http.routers.<< service_name >>_web_http.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
      - traefik.http.routers.<< service_name >>_web_http.entrypoints=<< traefik_entrypoint >>
      <%- if traefik_tls_enabled %>
      - traefik.http.routers.<< service_name >>_web_https.service=<< service_name >>_web
      - traefik.http.routers.<< service_name >>_web_https.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
      - traefik.http.routers.<< service_name >>_web_https.entrypoints=<< traefik_tls_entrypoint >>
      - traefik.http.routers.<< service_name >>_web_https.tls=true
      - traefik.http.routers.<< service_name >>_web_https.tls.certresolver=<< traefik_tls_certresolver >>
      <%- endif %>
    <%- endif %>

<%- if network_mode == 'bridge' or network_mode == 'macvlan' or traefik_enabled %>
networks:
  <%- if network_mode == 'bridge' or network_mode == 'macvlan'%>
  << network_name >>:
    <%- if network_external %>
    external: true
    <%- else %>
    <%- if network_mode == 'macvlan' %>
    driver: macvlan
    driver_opts:
      parent: << network_macvlan_parent_interface >>
    ipam:
      config:
        - subnet: << network_macvlan_subnet >>
          gateway: << network_macvlan_gateway >>
    name: << network_name >>
    <%- else %>
    driver: bridge
    <%- endif %>
    <%- endif %>
  <%- endif %>
  <%- if traefik_enabled %>
  << traefik_network >>:
    external: true
  <%- endif %>
<%- endif %>

<%- if volume_mode == 'local' %>
volumes:
  << service_name >>_work:
    driver: local
  << service_name >>_conf:
    driver: local
<%- elif volume_mode == 'nfs' %>
volumes:
  << service_name >>_work:
    driver: local
    driver_opts:
      type: nfs
      o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
      device: ":<< volume_nfs_path >>/work"
  << service_name >>_conf:
    driver: local
    driver_opts:
      type: nfs
      o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
      device: ":<< volume_nfs_path >>/conf"
<%- endif %>