mirror of
https://github.com/unifi-utilities/unifios-utilities.git
synced 2024-08-30 18:32:21 +00:00
78 lines
3.0 KiB
Markdown
78 lines
3.0 KiB
Markdown
# Run Pi-hole on your UDM
|
|
|
|
## Features
|
|
|
|
1. Run Pi-hole on your UDM with a completely isolated network stack. This will not port conflict or be influenced by any changes on by Ubiquiti
|
|
2. Persists through reboots and firmware updates.
|
|
|
|
## Requirements
|
|
|
|
1. You have successfully setup the on boot script described [here](https://github.com/boostchicken/udm-utilities/tree/master/on-boot-script)
|
|
|
|
## Customization
|
|
|
|
* Feel free to change [20-dns.conflist](../cni-plugins/20-dns.conflist) to change the IP address and MAC address of the container.
|
|
* Update [10-dns.sh](../dns-common/on_boot.d/10-dns.sh) with your own values
|
|
* If you want IPv6 support use [20-dnsipv6.conflist](../cni-plugins/20-dnsipv6.conflist) and update [10-dns.sh](../dns-common/on_boot.d/10-dns.sh) with the IPv6 addresses. Also, please provide IPv6 servers to podman using --dns arguments.
|
|
|
|
## Steps
|
|
|
|
1. Copy [05-install-cni-plugins.sh](../cni-plugins/05-install-cni-plugins.sh) to /mnt/data/on_boot.d
|
|
1. Execute /mnt/data/on_boot.d/05-install-cni-plugins.sh
|
|
1. On your controller, make a Corporate network with no DHCP server and give it a VLAN. For this example we are using VLAN 5.
|
|
2. Copy [20-dns.conflist](../cni-plugins/20-dns.conflist) to /mnt/data/podman/cni. This will create your podman macvlan network
|
|
3. Copy [10-dns.sh](../dns-common/on_boot.d/10-dns.sh) to /mnt/data/on_boot.d and update its values to reflect your environment
|
|
|
|
```
|
|
...
|
|
VLAN=5
|
|
IPV4_IP="10.0.5.3"
|
|
IPV4_GW="10.0.5.1/24"
|
|
...
|
|
CONTAINER=pihole
|
|
...
|
|
```
|
|
|
|
4. Execute /mnt/data/on_boot.d/10-dns.sh
|
|
5. Create directories for persistent Pi-hole configuration
|
|
|
|
```
|
|
mkdir -p /mnt/data/etc-pihole
|
|
mkdir -p /mnt/data/pihole/etc-dnsmasq.d
|
|
```
|
|
|
|
6. Create and run the Pi-hole docker container. The following command sets the upstream DNS servers to 1.1.1.1 and 8.8.8.8.
|
|
|
|
```sh
|
|
podman run -d --network dns --restart always \
|
|
--name pihole \
|
|
-e TZ="America/Los Angeles" \
|
|
-v "/mnt/data/etc-pihole/:/etc/pihole/" \
|
|
-v "/mnt/data/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/" \
|
|
--dns=127.0.0.1 \
|
|
--dns=1.1.1.1 \
|
|
--dns=8.8.8.8 \
|
|
--hostname pi.hole \
|
|
-e VIRTUAL_HOST="pi.hole" \
|
|
-e PROXY_LOCATION="pi.hole" \
|
|
-e ServerIP="10.0.5.3" \
|
|
-e IPv6="False" \
|
|
pihole/pihole:latest
|
|
```
|
|
|
|
The below errors are expected and acceptable
|
|
|
|
```sh
|
|
ERRO[0022] unable to get systemd connection to add healthchecks: dial unix /run/systemd/private: connect: no such file or directory
|
|
ERRO[0022] unable to get systemd connection to start healthchecks: dial unix /run/systemd/private: connect: no such file or directory
|
|
```
|
|
|
|
6. Set pihole password
|
|
|
|
```sh
|
|
podman exec -it pihole pihole -a -p YOURNEWPASSHERE
|
|
```
|
|
|
|
7. Update your DNS Servers to 10.0.5.3 (or your custom ip) for each of your Networks (UDM GUI | Networks | Advanced | DHCP Name Server)
|
|
8. Access the pihole like you would normally, e.g. http://10.0.5.3 if using examples above
|