pihole_doh

Pi-hole with DNS over HTTPS

Pi-hole with DNS over HTTPS (DoH) via cloudflared.

Features

• Pi-hole DNS server and ad blocker
• DNS over HTTPS (DoH) via cloudflared
• Web interface behind Traefik reverse proxy (to enable HTTPS)

Pre-requirments

If port 53/udp is used on the host system, you need to stop and disable the systemd-resolved service:

nano /etc/systemd/resolved.conf

Set the DNSStubListener to no:

DNSStubListener=no

Create a symlink and restart the systemd-resolved service afterwards:

ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf

systemctl restart systemd-resolved

Setup

1. DNS A or CNAME record pointing to your server for the Pi-hole web interface

   Example:

   # A record
   dns.borntoberoot.net --> 192.168.178.10
   
   # CNAME record
   dns.borntoberoot.net --> server01.borntoberoot.net
   

2. Adjust the configuration based on your needs in the following files:

   • /opt/container/stacks/pihole_doh/docker-compose.yml
   • /opt/container/stacks/pihole_doh/.env

3. Start the stack with docker compose up -d