tomit4/notes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

🚧 Reset pi-hole dns resolution and security notes

Browse source
This commit is contained in:
tomit4 2025-09-05 00:17:05 -07:00
parent 21ff2961a6
commit 49510a5801
2 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
self_host/pi-hole/docker-compose.yml
View file

@ -17,7 +17,8 @@ services:
- FTLCONF_webserver_api_password=${WEBPASSWORD} - FTLCONF_webserver_api_password=${WEBPASSWORD}
- FTLCONF_webserver_interface_theme=${WEBTHEME:-default-dark} - FTLCONF_webserver_interface_theme=${WEBTHEME:-default-dark}
- FTLCONF_dns_upstreams=127.0.0.1#5335 - FTLCONF_dns_upstreams=127.0.0.1#5335
- FTLCONF_dns_listeningMode=single # - FTLCONF_dns_listeningMode=single
- FTLCONF_dns_listeningMode=all
- FTLCONF_webserver_port=80 - FTLCONF_webserver_port=80
volumes: volumes:
- etc_pihole-unbound:/etc/pihole:rw - etc_pihole-unbound:/etc/pihole:rw

10
updates.txt
View file

@ -913,3 +913,13 @@ paru -Rs duf-git && doas pacman -S duf
08/30/2025 08/30/2025
Install pwgen Install pwgen
doas pacman -S pwgen doas pacman -S pwgen
09/05/2025
Add security fields so pihole is not exposed to public:
doas ufw default deny incoming (not necessary here, you already did this, but here for documentation purposes)
doas ufw allow in on lo
doas ufw deny in proto udp to any port 53
doas ufw deny in proto tcp to any port 53
doas ufw disable && doas ufw enable
This is because of recent updates to pihole-unbound docker config file (re-run docker compose on this file)