summaryrefslogtreecommitdiff
path: root/playbooks/roles/pihole/templates
diff options
context:
space:
mode:
authorElizabeth Hunt <me@liz.coffee>2025-03-21 22:58:42 -0700
committerElizabeth Hunt <me@liz.coffee>2025-03-21 22:58:42 -0700
commitdde6850257c1181802b1e8cd46b8aadfe1551b1f (patch)
treefae84615adb82a5f4af8a1095add6f330c4e7d83 /playbooks/roles/pihole/templates
parent053abdc560ad31e482fd631b2b7f8ccd4bd3b3f1 (diff)
downloadinfra-dde6850257c1181802b1e8cd46b8aadfe1551b1f.tar.gz
infra-dde6850257c1181802b1e8cd46b8aadfe1551b1f.zip
fix dns
Diffstat (limited to 'playbooks/roles/pihole/templates')
-rw-r--r--playbooks/roles/pihole/templates/stacks/docker-compose.yml38
-rw-r--r--playbooks/roles/pihole/templates/volumes/dnsmasq/.gitkeep0
-rw-r--r--playbooks/roles/pihole/templates/volumes/pihole/.gitkeep0
3 files changed, 38 insertions, 0 deletions
diff --git a/playbooks/roles/pihole/templates/stacks/docker-compose.yml b/playbooks/roles/pihole/templates/stacks/docker-compose.yml
new file mode 100644
index 0000000..be3150e
--- /dev/null
+++ b/playbooks/roles/pihole/templates/stacks/docker-compose.yml
@@ -0,0 +1,38 @@
+version: '3.2'
+
+services:
+ pihole:
+ image: pihole/pihole:latest
+ volumes:
+ - {{ pihole_base }}/volumes/pihole:/etc/pihole
+ - {{ pihole_base }}/volumes/dnsmasq:/etc/dnsmasq.d
+ environment:
+ - TZ={{ timezone }}
+ - FTLCONF_webserver_api_password={{ pihole_webpwd }}
+ - FTLCONF_dns_upstreams={{ upstream_dns_servers | join(';') }}
+ networks:
+ - proxy
+ deploy:
+ mode: replicated
+ replicas: 1
+ labels:
+ - traefik.enable=true
+ - traefik.swarm.network=proxy
+ - traefik.http.routers.piholeweb.tls=true
+ - traefik.http.routers.piholeweb.tls.certResolver=letsencrypt
+ - traefik.http.routers.piholeweb.rule=Host(`pihole.{{ traefik_domain }}`)
+ - traefik.http.routers.piholeweb.entrypoints=websecure
+ - traefik.http.services.piholeweb.loadbalancer.server.port=80
+ # 53/udp
+ - traefik.udp.routers.pihole-dns-udp.entrypoints=dns_udp
+ - traefik.udp.routers.pihole-dns-udp.service=pihole-dns-udp
+ - traefik.udp.services.pihole-dns-udp.loadbalancer.server.port=53
+ # 53/tcp
+ - traefik.tcp.routers.pihole-dns-tcp.rule=HostSNI(`*`)
+ - traefik.tcp.routers.pihole-dns-tcp.entrypoints=dns_tcp
+ - traefik.tcp.routers.pihole-dns-tcp.service=pihole-dns-tcp
+ - traefik.tcp.services.pihole-dns-tcp.loadbalancer.server.port=53
+
+networks:
+ proxy:
+ external: true
diff --git a/playbooks/roles/pihole/templates/volumes/dnsmasq/.gitkeep b/playbooks/roles/pihole/templates/volumes/dnsmasq/.gitkeep
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/pihole/templates/volumes/dnsmasq/.gitkeep
diff --git a/playbooks/roles/pihole/templates/volumes/pihole/.gitkeep b/playbooks/roles/pihole/templates/volumes/pihole/.gitkeep
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/playbooks/roles/pihole/templates/volumes/pihole/.gitkeep