[Question] How to pihole+dhcp+DoH over docker swarm about raspi-docker-stacks HOT 1 OPEN

network_mode: 'host'
    cap_add:
      - NET_ADMIN

version: "3.7"

# https://github.com/pi-hole/docker-pi-hole/blob/master/README.md

services:
  pihole:
    
    image: pihole/pihole:latest
    hostname: "pihole"    
    deploy:
      mode: replicated
      replicas: 1
      update_config:
        delay: 30s
      placement:
        constraints: [node.role == manager]
    # For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
    ports:
     - "53:53/tcp"
     - "53:53/udp"
     - "67:67/udp"
     - "80:80/tcp"
     - "443:443/tcp"
    network_mode: 'host'
    cap_add:
      - NET_ADMIN

    environment:
      TZ: "Asia/Kolkata"
      WEBPASSWORD: "some_password"
      DNS1: "172.18.0.1#5053"
      DNS2: "172.18.0.1#5053"
      DNS_FQDN_REQUIRED: "true"
      DNS_BOGUS_PRIV: "true"
      DNSSEC: "false"
      CONDITIONAL_FORWARDING: "true"
      CONDITIONAL_FORWARDING_IP: "192.168.0.1"
      CONDITIONAL_FORWARDING_DOMAIN: "home.local"
      CONDITIONAL_FORWARDING_REVERSE: "0.168.192.in-addr.arpa"
    # Volumes store your data between container upgrades
    volumes:
      - etc-pihole:/etc/pihole/
      - etc-dnsmasq.d:/etc/dnsmasq.d/
      # run `touch ./var-log/pihole.log` first unless you like errors
      # - var-log:/var/log/
    dns:
      - "127.0.0.1"
      # - "1.1.1.1" # fallback

  cloudflared:
    # Pinned to arm/v7 digest for crazymax/cloudflared:2020.2.0
    image: crazymax/cloudflared:latest
    deploy:
      mode: replicated
      replicas: 1
      update_config:
        delay: 30s    
      placement:
        constraints: [node.role == manager]
    ports:
      - target: 5053
        published: 5053
        protocol: udp
      - target: 49312
        published: 49312
        protocol: tcp
    environment:
      - "TZ=America/New_York"
      - "TUNNEL_DNS_UPSTREAM=https://1.1.1.1/dns-query,https://1.0.0.1/dns-query"
volumes:
  etc-pihole: {}
  etc-dnsmasq.d: {}
  var-log: {}