Skip to content

wizlee/pihole-unbound

Repository files navigation

Overview

Using one-container docker from chriscrowe/docker-pihole-unbound

  • Copy the pihole-unbound folder to the root of workspace for any custom modification
  • The whole repo is added as a submodule here for tracking

Getting Started

In progress... To be added after all configs are working!

Modification

  • Use locally build docker image
  • Override port 443 to avoid potential conflict
  • Disable DNSSEC
  • Add pihole-FTL.conf to include custom rate limit setting in pihole
  • Enable custom unbound log and increase verbosity to 4 for debugging
  • Add anudeepND whitelist into dockerfile
  • Revert .env to enable REV_SERVER.
  • Use specifiy docker image version in docker-compose
  • Attempt to fix 'No such file or directory' in synology default terminal by using array of string in the entrypoint commands
  • Change all line ending to LF from CRLF.
    • this also fixes the issue of unbound not able to start properly
  • Leave Apple's Private Relay block so that apple devices won't bypass pihole
    • When outside of home network, the private relay will be used.
  • Disable the use of conditional forwarding (by setting REV_SERVER=false) as it seems to generate a lot of traffic from ^.*p\.(([0-9]{1,3}\.){4})in-addr\.arpa$
    • There are solutions from this reddit post, however need time to digest the info thus the quickest way is to disable conditional forwarding
    • The conditional forwarding also don't seem to archive its intended purpose of showing individual endpoint clients in pihole instead of always from the router.
  • Add pihole.local as the value pf PIHOLE_PTR based on this doc.
    • Add domain=local in 99-edns.conf.
    • That .conf file will be copied into /etc/dnsmasq.d/ folder of the docker container.
    • dnsmasq will read all the file with .conf, thus that domain value is added in that file.
  • Modify build script to only build pihole-unbound image
    • Using this build script to build pihole-unbound image will now use a fixed pihole version instead of latest

Pending (Top most is the highest priority)

About

modified from chriscrowe/docker-pihole-unbound

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published