Two PiHole servers. One is hosted via docker on my primary file server and the other is hosted in a Hyper-V VM on my sole windows box. The VM one is also my DHCP server.
this post was submitted on 05 Oct 2024
24 points (100.0% liked)
homelab
171 readers
1 users here now
founded 4 years ago
MODERATORS
I had this setup a couple of months ago, worked great with gravity-sync :)
I use pihole for its good filtering, selective filtering, statistics and logging capabilities, and technitium dns as its upstream for it's superior capability in defining dns records, and because I can use a DoH dns provider with it
load more comments
(2 replies)
Unbound on my OPNsense firewall. I don't have advice for you, do you have some specific goals besides just having a DNS?
Not really, just fed up with remembering IP-Adresses :)
Look at reverse proxy instead. While you can do what you're after with DNS, a bunch of the reverse proxy systems will automatically deal with SSL certificate, and there are even a couple that eliminate essentially all configuration outside of your docker file. Like, add a new docker and it automatically configures appName.domain.tld with SSL assigned. And if you ever decide to expose that address to the Internet, reverse proxy makes that simple and provides some security options as well.
I use Caddy for my reverse proxy running from my OPNsense firewall, but if you want the automation with docker there are better options.
I will give this one a try, had a eye on it before asking already :D
Solid choice. It's been my go-to DNS+DHCP solution for over 5 years and has never let me down. Also a fan of DNSDist+PowerDNS, but for most environments (especially home/lab), Technitium wins by a mile.
I run Unbound on my opnsense firewall.
I think i will try unbound too :) Thank you!
I use Blocky as my DNS server.
Two pihole servers, one n VM vlan, one on device VLAN with OpnSense delivering them both via DHCP options. I sometimes update lists, like yearly... At best. They've been there over 7 years. Calling them robust is correct. The hypervisors are 3 proxmox servers in cluster using ceph. Intrl NUC 3rd Gen. Less than 80w combined with all vms. Also 8 years old no failures but tolerant for it.
I sometimes update lists, like yearly... At best
Don't they get updated automatically?
I think you can configure them to do so :)
Iirc I seem to find whatever was configured dead or no longer the cool choice when I check online.
Whatever it is, I barely touch it and it works great. Very happy.
My home lab is small so I just run BIND ony server
Two Pi-Hole docker container on two different servers. OpnSense DNS Plugin. Fallback, NextDNS Alternative, AdGuard is also a good DNS.
The default Unbound server on Opnsense.
I use AdGuard in my OpnSense firewall.
Why do you want a server on proxmox and NAS? or have I read this wrong?
Just run it as systemd service on my server.
CoreDNS in Docker to mix things up here a little.
I use PiHole+Unbound in a podman quadlet, and give it its own macvlan. Works great for me.