this post was submitted on 18 Feb 2025
379 points (100.0% liked)

Selfhosted

44718 readers
3178 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 30 points 1 month ago (1 children)

Anyone got screenshots of the new UI?

[–] [email protected] 28 points 1 month ago (5 children)

https://u.drkt.eu/PZJz6H.png I don't know how to embed an image link

It's not fundamentally different

[–] [email protected] 31 points 1 month ago

just for future reference (click the source button to see how I embedded your image)

![alt text](https://image.link)

pihole v6 ui

[–] [email protected] 7 points 1 month ago

Thanks, I haven't used pi-hole in a while, but it looks the same for me.

[–] [email protected] 5 points 1 month ago

Thanks for sharing! I need to get mine running again.

[–] [email protected] 4 points 1 month ago (1 children)

Top premitted domain: e621.net

A fellow sysadmin furry I see

[–] [email protected] 2 points 1 month ago
load more comments (1 replies)
[–] [email protected] 28 points 1 month ago (1 children)

Be careful upgrading Docker versions, it has breaking changes.

https://registry.hub.docker.com/r/pihole/pihole/

[–] [email protected] 6 points 1 month ago* (last edited 1 month ago) (2 children)

Whew, this is why I pin on sha256. I fear for the latest crowd.

Edit: At least it seems updating the container doesn't break things:

Replacing any v5 image (2024.07.0 and earlier) with a v6 image will result in updated configuration files. These changes are irreversible.

[–] [email protected] 3 points 4 weeks ago

Live on the edge

Pin to develop

[–] [email protected] 2 points 1 month ago

I don't use pihole, but everything I use is pinned by major release version. No problem yet with surprise breakage.

[–] [email protected] 13 points 1 month ago

Looks like a great release!

[–] [email protected] 10 points 1 month ago (1 children)

Can you run pi-hole in lxc without also needing docker ?

[–] [email protected] 12 points 1 month ago (2 children)

Yes , that's how I run it in my Proxmox. Just create the lxc, wget the installer and run it.

[–] [email protected] 2 points 1 month ago
[–] Fedegenerate 2 points 1 month ago

+1 for running pihole in an LXC, and a redundant pihole in a docker container.

They never update at the same time, or in the same way so near as dammit constant uptime.

[–] [email protected] 9 points 1 month ago

Neutrino emissions detected!

[–] [email protected] 8 points 1 month ago

upgrade went without a hitch (docker), only thing needed changing is the web UI password in docker-compose.yml. everything works, UI is infinitely faster, first impressions very positive.

[–] [email protected] 7 points 1 month ago (2 children)

If Pi-Hole starts supporting DoH out-of-the-box, I'll happily switch from AdguardHome.

[–] [email protected] 4 points 1 month ago (2 children)
[–] [email protected] 9 points 1 month ago (1 children)

DNS Over Https

Not to be confused with

DNS Over TLS

It's just a way of keeping your ISP from reading your DNS requests.

[–] [email protected] 8 points 1 month ago (1 children)

Not just reading. A while back, some ISPs moved towards replacing DNS queries to known DNS servers with their own replies.

[–] [email protected] 1 points 1 month ago

Yeah, I still want to be over ISPs replacing DNS failures with their own search engines been happening for decades

[–] [email protected] 5 points 1 month ago

DNS over HTTPS. It allows encrypted DNS lookup with a URL, which allows for url-based customizations not possible with traditional DNS lookups (e.g. the server could have /ads or /trackers endpoints so you can choose what to block).

DNS Over TLS (DoT) is similar, but it doesn't use URLs, just IP addresses like generic DNS. Both are encrypted.

[–] [email protected] 2 points 1 month ago (1 children)

https://docs.pi-hole.net/guides/dns/cloudflared/

Is this not that, or is Cloudflare on the naughty list these days?

[–] [email protected] 3 points 1 month ago (1 children)

No native support for DoH in Pi-Hole yet. Additional setup is required to enable it on Pi-Hole[1].

[1] https://docs.pi-hole.net/guides/dns/cloudflared/

[–] [email protected] 2 points 1 month ago

I use it in this configuration.

It works well except, if you lose connection temporarily the cloudflared stops responding until some, long (60s or so) timeout period.

A minor annoyance, I usually just manuirestart the service... but I cannot find the setting that is causing this.

[–] [email protected] 6 points 1 month ago (7 children)

How much is Pi-hole worth it assuming I’m using UBO and also have most non-ad based streaming services?

I’m thinking phones and less often used devices?

[–] [email protected] 16 points 1 month ago

It’s extra protection, especially if you use non-browser apps on your devices it can limit tracking.

[–] [email protected] 5 points 1 month ago

I love my pihole. Even gets rid of the ads on my roku homescreen.

[–] [email protected] 5 points 1 month ago (1 children)

I can tell you something: I'm using some free apps on my Android phone and never notice ads at home, but when I'm on the mobile network or on a different wifi (at work or some public place) I start seeing them.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago) (1 children)

This is one of the reasons why I set up a Wireguard VPN connection to my home network, and an on-demand VPN connection on my phone that automatically turns on anytime I’m not on the home network. Even away from home I get the benefits of my Pi-hole+Unbound (running as recursive resolver) setup.

[–] [email protected] 2 points 1 month ago

This is my setup too. I use WG-Tunnel to manage the VPN connection on my phone. It just monitors whenever you disconnect from your trusted WiFi network and automatically enables the VPN.

Only hiccup I've found is wireless Android Auto isn't a fan of a VPN.

[–] [email protected] 5 points 1 month ago

It's really nice for random browsing/apps. Games, free tools, general web browsing; none of it loads ads.

Some mobile games will even attempt to load ads, fail, then give you the reward for 'watching' the ad.

It also stops devices from phoning home to upload telemetry and blocks known malware domains. (depends on the lists you use, heres a source for some lists)

[–] [email protected] 2 points 1 month ago

I layer up. Always pihole, and whatever I can run locally on a machine or browser.

[–] [email protected] 2 points 1 month ago

I’m partial to AdGuardHome myself, but PiHole does the job well

load more comments (1 replies)
[–] [email protected] 6 points 1 month ago (1 children)

Has anyone tried https://github.com/hickory-dns/hickory-dns? It seems to be a complete DNS server instead of what looks like a bunch of bash config for a standard Linux tool. There are block lists you can configure as well, and it supports pretty much everything.

It's way overkill, but hey, why not?

[–] [email protected] 4 points 1 month ago

I probably would just stick with dnsmasq

[–] [email protected] 5 points 1 month ago (1 children)

Good news! Hope they implement detailed query log and support for upstream DoH DNS next.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago)

They've added a bit more info to the query log, when you click on individual items.

It's still not a native feature, but; You can add DOH using cloudflared, incl configuring which upstream(s) to use (you don't have to use cloudflare itself, just the tool).

There's even a docker version.

[–] [email protected] 3 points 1 month ago (2 children)
[–] [email protected] 5 points 1 month ago

NextDNS isn’t selfhosted, is it?

[–] [email protected] 2 points 1 month ago (1 children)

What does nextdns do that pihole can't?

[–] [email protected] 1 points 4 weeks ago

The biggest feature for me is the ability to use it on any network (cellular, vpn, WiFi, etc). I never see ads. Pihole can’t (easily) do that.

[–] [email protected] 2 points 1 month ago (2 children)

Why would someone pick PiHole over say a customized NextDNS on your router?

[–] [email protected] 8 points 1 month ago (2 children)

NextDNS doesn't support unlimited DNS query for free, I think.

[–] [email protected] 16 points 1 month ago (1 children)

Not open source so hell no

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 3 points 1 month ago* (last edited 1 month ago) (1 children)

Little of column A little of column B.

I use pihole on the LAN, then upstream is cloudflared translating DNS to DOH using NextDNS as the primary and Quad9 as the fallback.

Looking at the last 24hrs; my whole LAN network has made 91k DNS requests, 14.5% of that being passed to the upstream (the rest is locally cached responses or blocked) so ~12.7k served by NextDNS. When/if that 300k limit is reached, cloudflared will just fallback to Quad9.

With this I get the blocking from NextDNS as well as whatever additional lists I want to use; plus pihole serves local only records for self-hosted services and fixed names for LAN devices (I find standard broadcasted hostnames unreliable at best).

load more comments (1 replies)
[–] Fedegenerate 2 points 1 month ago* (last edited 1 month ago)

Update went fine on a bare metal install. Customising the webUI port is a little easier now, instead of editing lighttdp.conf I think you can do it in the UI.

I struggled to find some settings, I looked for ages for the API token. Found it in all settings: expert, scroll for half a mile down the webUI API section.

Also, struggled with adding CNAMES in bulk, I thought you could do that in the old UI. You might be able to in the new UI. I just 'one by one'd them.

Docker update went flawlessly.

I have an lxc and to go which is a task for another day, unless TTeck's updater beats me to it.

[–] [email protected] 2 points 3 weeks ago

Pi-hole is one of my favorite pieces of software. It is the reason I began self-hosting six years ago.

load more comments
view more: next ›