From d436d63547d2f8c12bd162027236657ce9175255 Mon Sep 17 00:00:00 2001
From: Giorgio Ravera <giorgio.ravera@gmail.com>
Date: Sat, 27 Dec 2025 13:29:52 +0100
Subject: [PATCH] Added Ad-Guard

---
 adguard/docker-compose.yaml | 44 +++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 adguard/docker-compose.yaml

diff --git a/adguard/docker-compose.yaml b/adguard/docker-compose.yaml
new file mode 100644
index 0000000..e9a3696
--- /dev/null
+++ b/adguard/docker-compose.yaml
@@ -0,0 +1,44 @@
+services:
+  adguard:
+    container_name: adguard
+    image: adguard/adguardhome:latest
+    restart: always
+    #ports:
+    #  - "53:53/tcp"
+    #  - "53:53/udp"
+    #  - "67:67/udp"     # DHCP
+    #  - "68:68/udp"     # DHCP
+    #  - "80:80/tcp"     # UI
+    #  - "5380:80/tcp"   # UI -> after update for traefik
+    #  - "443:443/tcp"   # UI HTTPS
+    #  - "853:853/tcp"   # DoT
+    #  - "3000:3000/tcp" # Setup iniziale
+    environment:
+      - TZ=${DOCKER_TZ}
+    volumes:
+      - ${DOCKER_CFG_DIR}/adguard/config:/opt/adguardhome/conf
+      - ${DOCKER_CFG_DIR}/adguard/data:/opt/adguardhome/work
+    network_mode: host
+    #networks:
+    #  - proxy
+    cap_add:
+      - NET_ADMIN
+    labels:
+      - "traefik.enable=true"
+      # Router: HTTP
+      - "traefik.http.routers.adguard.entrypoints=http"
+      - "traefik.http.routers.adguard.rule=Host(`dns-server.giorgioravera.it`)"
+      - "traefik.http.routers.adguard.middlewares=adguard-https-redirect"
+      # Router: HTTPS
+      - "traefik.http.routers.adguard-secure.entrypoints=https"
+      - "traefik.http.routers.adguard-secure.rule=Host(`dns-server.giorgioravera.it`)"
+      - "traefik.http.routers.adguard-secure.tls=true"
+      - "traefik.http.routers.adguard-secure.service=adguard"
+      # Middleware: Redirect http to https
+      - "traefik.http.middlewares.adguard-https-redirect.redirectscheme.scheme=https"
+      # Service: Loadbalancer
+      - "traefik.http.services.adguard.loadbalancer.server.port=5380"
+
+networks:
+  proxy:
+    external: true
-- 
2.47.3