version: "3"

services:
  dnscrypt-server:
    image: jedisct1/dnscrypt-server:latest
    container_name: dnscrypt-server
    restart: unless-stopped
    expose:
      - "8443/tcp"
    ports:
      - "8443:8443/udp"
    networks:
      - dnscrypt
    volumes:
      - ./encrypted-dns.toml.in:/opt/encrypted-dns/etc/encrypted-dns.toml.in:ro
      - ${LOCAL_STACK_DIR}/dnscrypt-server/keys:/opt/encrypted-dns/etc/keys
      - ${LOCAL_STACK_DIR}/dnscrypt-server/lists:/opt/encrypted-dns/etc/lists
    command: "init -N dncr.eracolatore.tk -E 173.249.32.7:8443"
    environment:
      - TZ='Europe/Berlin'

  unbound:
    image: mvance/unbound:latest
    container_name: unbound
    restart: unless-stopped
    expose:
      - "53/tcp"
      - "53/udp"
    networks:
      - default
      - dnscrypt
    volumes:
      - ./volumes/unbound/etc/unbound:/opt/unbound/etc/unbound

  dnscrypt-server-doh:
    image: satishweb/doh-server:latest
    container_name: dnscrypt-server-doh
    environment:
      - DEBUG=0
      - UPSTREAM_DNS_SERVER=udp:unbound:53
      - DOH_HTTP_PREFIX=/dns-query
      - DOH_SERVER_LISTEN=0.0.0.0:8053
      - DOH_SERVER_TIMEOUT=10
      - DOH_SERVER_TRIES=3
      - DOH_SERVER_VERBOSE=true
      - VIRTUAL_HOST=doh.dns.eracolatore.tk
      - VIRTUAL_PORT=8053
      - LETSENCRYPT_HOST=doh.dns.eracolatore.tk
      - LETSENCRYPT_EMAIL=meliurwen+letsencrypt@gmail.com

networks:
  default:
    external:
      name: ${NETWORK:-webservices}
  dnscrypt: