version: '3'

services:
  hbbs:
    container_name: hbbs
    image: rustdesk/rustdesk-server:latest
    command: hbbs -r aknlw.com:21117
    ports:
      - 21115:21115
      - 21116:21116
      - 21116:21116/udp
      - 21118:21118
    depends_on:
      - hbbr
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/rustdesk/hbbs:/root

  hbbr:
    container_name: hbbr
    image: rustdesk/rustdesk-server:latest
    command: hbbr
    ports:
      - 21117:21117
      - 21119:21119
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/rustdesk/hbbr:/root

  pihole:
    container_name: pihole
    image: cbcrowe/pihole-unbound:latest
    hostname: ${HOSTNAME}
    domainname: ${DOMAIN_NAME}
    environment:
      - FTLCONF_LOCAL_IPV4=${EXTERNALIP}
      - TZ=${TZ}
      - WEBPASSWORD=${WEBPASSWORD}
      - WEBTHEME=${WEBTHEME:-default-dark}
      - REV_SERVER=${REV_SERVER:-false}
      - REV_SERVER_TARGET=${REV_SERVER_TARGET}
      - REV_SERVER_DOMAIN=${REV_SERVER_DOMAIN}
      - REV_SERVER_CIDR=${REV_SERVER_CIDR}
      - PIHOLE_DNS_=127.0.0.1#5335
      - DNSSEC="true"
      - DNSMASQ_LISTENING=single
    ports:
      - 53:53/tcp
      - 53:53/udp
      - 8000:80/tcp
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/pihole/unbound:/etc/pihole:rw
      - ${DOCKERCONFIGS}/pihole/dnsmasq-unbound:/etc/dnsmasq.d:rw

  syncthing-relay-discovery:
    container_name: syncthing
    image: t4skforce/syncthing-relay-discovery:latest
    environment:
      RELAY_OPTS:
      DISC_OPTS: 
      POOLS:
    ports:
      - 22067:22067
      - 22026:22026
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/syncthing:/home/syncthing/certs

  wg-easy:
    container_name: wg-easy      
    image: weejewel/wg-easy
    environment:
      - WG_HOST=${WG_HOST}
      - PASSWORD=${WG_PASSWORD}
      - WG_DEFAULT_DNS=1.1.1.1, 9.9.9.9
      - WG_PORT=51830
      - WG_PERSISTENT_KEEPALIVE=25
      - WG_DEFAULT_ADDRESS=10.8.0.x
      - WG_MTU=1420
      - WG_ALLOWED_IPS=10.8.0.0/24
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
    ports:
      - "51830:51820/udp"
      - "51831:51821/tcp"
    restart: unless-stopped
    volumes:
      - ${DOCKERCONFIGS}/wireguard:/etc/wireguard