version: "2.1"
services:
  tor-relay1:
    container_name: tor-relay1.alm.lan
    restart: always
    env_file: /home/${USER}/docker/builds/relay1.env
    image: registry.alm.lan/tor-relay
    extra_hosts:
      - "nagios.docker.lan:192.168.249.215"
    volumes:
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    networks:
      alm.lan:
        ipv4_address: 192.168.8.211
      nagios.docker.lan:
        ipv4_address: 192.168.249.211
  tor-relay2:
    container_name: tor-relay2.alm.lan
    restart: always
    env_file: /home/${USER}/docker/builds/relay2.env
    image: registry.alm.lan/tor-relay
    extra_hosts:
      - "nagios.docker.lan:192.168.249.215"
    volumes:
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    networks:
      alm.lan:
        ipv4_address: 192.168.8.213
      nagios.docker.lan:
        ipv4_address: 192.168.249.213
  nagios:
    container_name: nagios.alm.lan
    restart: always
    image: registry.alm.lan/nagios
    volumes:
      - /mnt/stream/docker/nagios:/usr/local/nagios/etc
      - /mnt/3cx-backup:/mnt/3cx-backup
      - /home/${USER}/.ssh:/home/nagios/.ssh
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    extra_hosts:
      - "vhost.docker.lan:192.168.250.254"
    networks:
      alm.lan:
        ipv4_address: 192.168.8.215
      docker.lan:
        ipv4_address: 192.168.250.215
      nagios.docker.lan:
        ipv4_address: 192.168.249.215
    devices:
      - "/dev/net/tun:/dev/net/tun"
    cap_add:
      - "net_admin"
  pihole2:
    container_name: pihole2.alm.lan
    restart: always
    image: registry.alm.lan/pihole
    volumes:
      - pivpn-etc:/etc/openvpn
      - pivpn-ovpns:/home/pi/ovpns
      - /home/${USER}/.ssh:/home/pi/.ssh
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
      - pihole-dnsmasq:/etc/dnsmasq.d
      - pihole-etc:/etc/pihole
    extra_hosts:
      - "stream.docker.lan:192.168.250.254"
    networks:
      alm.lan:
        ipv4_address: 192.168.8.252
      docker.lan:
        ipv4_address: 192.168.250.252
    environment:
      TZ: 'Australia/Brisbane'
    devices:
      - "/dev/net/tun:/dev/net/tun"
    cap_add:
      - "net_admin"
volumes:
  pihole-etc:
    driver: local
    driver_opts:
      type: nfs
      device: ":/srv/docker/volumes/pihole/etc"
      o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
  pihole-dnsmasq:
    driver: local
    driver_opts:
      type: nfs
      device: ":/srv/docker/volumes/pihole/dnsmasq.d"
      o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
  pivpn-ovpns:
    driver: local
    driver_opts:
      type: nfs
      device: ":/srv/docker/volumes/pivpn/ovpns"
      o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
  pivpn-etc:
    driver: local
    driver_opts:
      type: nfs
      device: ":/srv/docker/volumes/pivpn/etc"
      o: "addr=nfs.alm.lan,rw,nfsvers=4,async"
networks:
  alm.lan:
    name: alm.lan
    driver: ipvlan    
    driver_opts: 
      com.docker.network.enable_ipv6: "false"
      parent: "enp0s3"
    ipam:
      driver: default
      config:
        - subnet: 192.168.8.0/24
          gateway: 192.168.8.254
  docker.lan:
    name: docker.lan
    driver_opts:
      com.docker.network.enable_ipv6: "false"
    ipam:
      config:
        - subnet: 192.168.250.0/24
          gateway: 192.168.250.254
  nagios.docker.lan:
    name: nagios.docker.lan
    driver_opts:
      com.docker.network.enable_ipv6: "false"
    ipam:
      config:
        - subnet: 192.168.249.0/24
          gateway: 192.168.249.254