capabilities = ["NET_RAW", "NET_ADMIN", "NET_BIND_SERVICE"]

[service]
name = "adguard"
image = "adguard/adguardhome"

[[volumes]]
source = "adguard-data"
target = "/opt/adguardhome/work"
create = true

[[volumes]]
source = "adguard-certs"
target = "/opt/adguardhome/certificates"
create = true

[[volumes]]
source = "/var/containers/adguard"
target = "/opt/adguardhome/conf"

[[ports]]
host = 8888
container = 3000

# DNS ports
[[ports]]
host = 53
container = 53
protocol = "udp"

[[ports]]
host = 53
container = 53
protocol = "tcp"

# DHCP ports
[[ports]]
host = 67
container = 67
protocol = "udp"

[[ports]]
host = 68
container = 68
protocol = "udp"

# DNS-over-TLS
[[ports]]
host = 853
container = 853
protocol = "tcp"

# DNS-over-QUIC (784/853/8853)
[[ports]]
host = 784
container = 784
protocol = "udp"