mirror of https://github.com/unifi-utilities/unifios-utilities.git synced 2024-08-30 18:32:21 +00:00

* Add a script to update your pihole container

* Add instructions for upgrading your pihole container

Co-authored-by: Jon Stroud <jon.stroud@keysight.com>

2021-07-02 22:33:55 -07:00

3.9 KiB

Raw Blame History

Run Pi-hole on your UDM

Features

Run Pi-hole on your UDM with a completely isolated network stack. This will not port conflict or be influenced by any changes on by Ubiquiti
Persists through reboots and firmware updates.

Requirements

You have successfully setup the on boot script described here

Customization

Feel free to change 20-dns.conflist to change the IP address and MAC address of the container.
Update 10-dns.sh with your own values
If you want IPv6 support use 20-dnsipv6.conflist and update 10-dns.sh with the IPv6 addresses. Also, please provide IPv6 servers to podman using --dns arguments.

Steps

Copy 05-install-cni-plugins.sh to /mnt/data/on_boot.d
Execute /mnt/data/on_boot.d/05-install-cni-plugins.sh
On your controller, make a Corporate network with no DHCP server and give it a VLAN. For this example we are using VLAN 5.
Copy 20-dns.conflist to /mnt/data/podman/cni. This will create your podman macvlan network
Copy 10-dns.sh to /mnt/data/on_boot.d and update its values to reflect your environment
```
...
VLAN=5
IPV4_IP="10.0.5.3"
IPV4_GW="10.0.5.1/24"
...
CONTAINER=pihole
...
```
Execute /mnt/data/on_boot.d/10-dns.sh

Create directories for persistent Pi-hole configuration

mkdir -p /mnt/data/etc-pihole
mkdir -p /mnt/data/pihole/etc-dnsmasq.d

Create and run the Pi-hole docker container. The following command sets the upstream DNS servers to 1.1.1.1 and 8.8.8.8.

 podman run -d --network dns --restart always \
    --name pihole \
    -e TZ="America/Los Angeles" \
    -v "/mnt/data/etc-pihole/:/etc/pihole/" \
    -v "/mnt/data/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/" \
    --dns=127.0.0.1 \
    --dns=1.1.1.1 \
    --dns=8.8.8.8 \
    --hostname pi.hole \
    -e VIRTUAL_HOST="pi.hole" \
    -e PROXY_LOCATION="pi.hole" \
    -e ServerIP="10.0.5.3" \
    -e IPv6="False" \
    pihole/pihole:latest

The below errors are expected and acceptable

   ```sh
   ERRO[0022] unable to get systemd connection to add healthchecks: dial unix /run/systemd/private: connect: no such file or directory
   ERRO[0022] unable to get systemd connection to start healthchecks: dial unix /run/systemd/private: connect: no such file or directory
   ```

Set pihole password

podman exec -it pihole pihole -a -p YOURNEWPASSHERE

Update your DNS Servers to 10.0.5.3 (or your custom ip) for each of your Networks (UDM GUI | Networks | Advanced | DHCP Name Server)
Access the pihole like you would normally, e.g. http://10.0.5.3 if using examples above

Upgrading your PiHole container

Edit upd_pihole.sh script to use the same podman run command you used at installation.
Copy the upd_pihole.sh script to /mnt/data/scripts
Anytime you want to update your pihole installation, simply run /mnt/data/scripts/upd_pihole.sh

PiHole with CloudFlareD Command

```sh
 podman run -d --network dns --restart always \
    --name pihole \
    -e TZ="America/Los Angeles" \
    -v "/mnt/data/etc-pihole/:/etc/pihole/" \
    -v "/mnt/data/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/" \
    --dns=127.0.0.1 \
    --dns=1.1.1.1 \
    --hostname pi.hole \
    -e CLOUDFLARED_OPTS="--port 5053 --address 0.0.0.0" \
    -e VIRTUAL_HOST="pi.hole" \
    -e PROXY_LOCATION="pi.hole" \
    -e ServerIP="10.0.5.3" \
    -e PIHOLE_DNS_="127.0.0.1#5053" \
    -e IPv6="False" \
    boostchicken/pihole:latest
```

3.9 KiB Raw Blame History