version: "3"
services:
  server:
    image: goofball222/dns-over-https # satishweb/doh-server:latest
#    hostname: doh-server
    networks:
      - traefik_default
#    environment:
      # Enable below line to see more logs
#      DEBUG: "1"
#      UPSTREAM_DNS_SERVER: "udp:pihole:53"
#      DOH_HTTP_PREFIX: "/dns-query"
#      DOH_SERVER_LISTEN: ":8053"
#      DOH_SERVER_TIMEOUT: "10"
#      DOH_SERVER_TRIES: "3"
#      DOH_SERVER_VERBOSE: "true"
#    volumes:
#       - ./server:/server
#       - ./data/app-config:/app-config
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.doh-server.rule=Host(`dns.lan.ddnsgeek.com`)"
      - "traefik.http.routers.doh-server.entrypoints=websecure"
      - "traefik.http.services.doh-server.loadbalancer.server.port=8053"
      - "traefik.http.routers.doh-server.middlewares=error-pages-middleware"
#      - "traefik.http.middlewares.mw-doh-compression.compress=true"
      - "traefik.http.routers.doh-server.tls=true"
#      - "traefik.http.middlewares.mw-doh-tls.headers.sslredirect=true"
#      - "traefik.http.middlewares.mw-doh-tls.headers.sslforcehost=true"
      - "traefik.http.routers.doh-server.tls.certresolver=myresolver"
#      - "traefik.http.routers.doh-server.tls.domains[0].main=dns.lan.ddnsgeek.com"
#      - "traefik.http.routers.doh-server.tls.domains[0].sans=dns.lan.ddnsgeek.com"
      # Protection from requests flood
#      - "traefik.http.middlewares.mw-doh-ratelimit.ratelimit.average=100"
#      - "traefik.http.middlewares.mw-doh-ratelimit.ratelimit.burst=50"
#      - "traefik.http.middlewares.mw-doh-ratelimit.ratelimit.period=10s"
networks:
  traefik_default:
    external: true