pihole-dot-doh

Official pihole docker with both DoT (DNS over TLS) and DoH (DNS over HTTPS) clients. Don't browse the web securely and yet still send your DNS queries in plain text!

Built for Raspberry Pi4, the next 2 commands were required to run the docker on arm for me.

BuildX docker buildx create --name mybuilder --use

Run BuildX docker buildx inspect --bootstrap

Usage:

For docker parameters, refer to official pihole docker readme. Below is an Unraid example.

docker run -d \
--platform linux/arm/v7 \
--name='pihole-dot-doh' \
--cap-add=NET_ADMIN \
--restart=unless-stopped \
--net='bridge' \
-e TZ="Europe/London" \
-e HOST_OS="Pi4" \
-v '/home/docker/pihole-dot-doh/pihole/':'/etc/pihole/':'rw' \
-v '/home/docker/pihole-dot-doh/dnsmasq.d/':'/etc/dnsmasq.d/':'rw' \
-v '/home/docker/pihole-dot-doh/config/':'/config':'rw' \
-e 'DNS1'='127.1.1.1#5153' \
-e 'DNS2'='127.2.2.2#5253' \
-e 'TZ'='Europe/London' \
-e 'WEBPASSWORD'='password' \
-e 'INTERFACE'='br0' \
-e 'ServerIP'='192.168.X.X' \
-e 'ServerIPv6'='' \
-e 'IPv6'='False' \
-e 'DNSMASQ_LISTENING'='all' \
-p '53:53/tcp' \
-p '53:53/udp' \
-p '67:67/udp' \
-p '80:80/tcp' \
-p '443:443/tcp' \
'mrchris82/pihole-dot-dohpi4'

Notes:

• Remember to set pihole env DNS1 and DNS2 to use the DoH / DoT IP below. If either DNS1 or DNS2 is NOT set, Pihole will use a non-encrypted service.
  • DoH service (cloudflared) runs at 127.1.1.1#5153. Uses cloudflare (1.1.1.1 / 1.0.0.1) by default
  • DoT service (stubby) runs at 127.2.2.2#5253. Uses google (8.8.8.8 / 8.8.4.4) by default
  • To use just DoH or just DoT service, set both DNS1 and DNS2 to the same value.
• In addition to the 2 official paths, you can also map container /config to expose configuration yml files for cloudflared (cloudflared.yml) and stubby (stubby.yml).
  • Edit these files to add / remove services as you wish. The flexibility is yours.
• Credits:
  • Pihole (buster) base image is the official pihole/pihole:master-buster
  • Cloudflared client was obtained from official site
  • Stubby is a standard debian buster package
  • Folk from testdasi / https://github.com/testdasi/pihole-dot-doh / https://paypal.me/mersenne