PiHole

Pi-Hole is the core of our DNS resolution, providing ad-blocking and tracking protection for all devices on our network.

It runs on a small VM alongside Unbound, our DNS resolver.

Installation

• Create a small VM in proxmox
• Install a lightweight linux image to host the apps. i.e. Debian
• Install Pi-Hole
  • https://github.com/pi-hole/pi-hole/#one-step-automated-install
• Install Unbound
  • https://www.nlnetlabs.nl/projects/unbound/download/

Ad-Blocking

Select a few blocklists and add them to the subscribed lists.

Configuration

We use Pihole to set up our .local domains for internal DNS resolution.

• settings->Local DNS Records
• Add a new record for each .local domain routing to our reverse proxy, Caddy, IP
• Also add records for external domains routing to the same IP to avoid NAT loopback issues.

DNS upstreams should be set to ONLY Unbound, 127.0.0.1:5335