34 lines
1.2 KiB
YAML
34 lines
1.2 KiB
YAML
---
|
|
services:
|
|
adguard-cidre:
|
|
build: .
|
|
container_name: adguard-cidre
|
|
restart: unless-stopped
|
|
environment:
|
|
- PUID=${PUID} # user id the process runs as, matches ownership of the /adguard mount
|
|
- PGID=${PGID} # group id the process runs as
|
|
- TZ=${TZ} # change to your timezone
|
|
- BLOCK_COUNTRIES=${BLOCK_COUNTRIES} # choose countries listed IP to block. Full lists here https://github.com/vulnebify/cidre/tree/main/output/cidr/ipv4
|
|
- BLOCKLIST_CRON_TYPE=${BLOCKLIST_CRON_TYPE} # daily or weekly
|
|
# if weekly, choose the day
|
|
- BLOCKLIST_CRON_DAY=${BLOCKLIST_CRON_DAY}
|
|
- BLOCKLIST_CRON_TIME=${BLOCKLIST_CRON_TIME}
|
|
- DOCKER_API_URL=${DOCKER_API_URL} # docker socket proxy
|
|
- ADGUARD_CONTAINER_NAME=${ADGUARD_CONTAINER_NAME} # adguard container name
|
|
volumes:
|
|
- /path/to/adguard/confdir:/adguard
|
|
|
|
socket-proxy:
|
|
image: lscr.io/linuxserver/socket-proxy:latest
|
|
container_name: socket-proxy-adguard
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
environment:
|
|
- CONTAINERS=1
|
|
- ALLOW_RESTARTS=1
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
restart: unless-stopped
|
|
read_only: true
|
|
tmpfs:
|
|
- /run |