version: '3.8'

services:
  coredns:
    image: coredns/coredns:1.11.1
    container_name: provisioning-coredns
    restart: unless-stopped

    ports:
      - "5353:53/udp"
      - "5353:53/tcp"
      - "9153:9153/tcp"  # Metrics

    volumes:
      - ${HOME}/.provisioning/coredns/Corefile:/Corefile:ro
      - ${HOME}/.provisioning/coredns/zones:/zones:ro
      - coredns-logs:/logs

    command: -conf /Corefile

    networks:
      - provisioning-network

    healthcheck:
      test: ["CMD", "nc", "-z", "localhost", "53"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s

    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

    environment:
      - TZ=UTC

volumes:
  coredns-logs:
    driver: local

networks:
  provisioning-network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16