version: "3.8"  # Modern version (original was 3.6, safe to bump)

services:
  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    restart: unless-stopped
    hostname: pihole  # Cleaner than the random container ID
    environment:
      TZ: America/New_York                  # Proper IANA format (was "New York")
      FTLCONF_webserver_api_password: "~Guards1345"
      FTLCONF_dns_listeningMode: ALL
      FTL_CMD: no-daemon
      DNSMASQ_USER: pihole
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "8080:80/tcp"     # HTTP admin
      - "8443:443/tcp"    # HTTPS admin
    volumes:
      - "/data/compose/5/etc-pihole:/etc/pihole:rw"   # Keep this — confirmed by inspect
      # Add this second volume if you have custom dnsmasq configs (very common for Pi-hole)
      # - "/data/compose/5/etc-dnsmasq.d:/etc/dnsmasq.d:rw"
    networks:
      - pihole_default