Pihole + Unbound + Hyperlocal

IMPORTANT: When using this Docker image, please report any bugs or suggestions to us directly.

Overview

Introduction

Pi-hole:

  • Pi-hole is a DNS sinkhole that protects your devices from unwanted content, without installing any client-side software.

Unbound:

  • Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards.

Hyperlocal:

  • To spare the initial DNS query to the DNS-Root-Servers by Unbound, we provide Unbound with an appropriate configuration. With each Pi-hole update, the DNS-Root-Zone (root.hints) is also updated.

Prerequisites

First startup

Copy example.env to .env and change the parameters

cp example.env .env
vi .env

Start the container

docker-compose up -d

Testing

docker exec -it pihole-unbound bash
dig github.com @127.0.0.1 +short
dig sigfail.verteiltesysteme.net @127.0.0.1 | grep status 
dig sigok.verteiltesysteme.net @127.0.0.1 | grep status 
  • First dig should show an IP address
  • Second dig should show status: SERVFAIL
  • Last dig should show status: NOERROR

Additional configuration

Edit setupVars.conf

vi ./etc-pihole/setupVars.conf

and add

# Caching is done by unbound
CACHE_SIZE=0

resolv.conf

If you are using a self-created docker network or having problems with the pihole deployment inside the container, uncomment the following line in the docker-compose.yaml

#- ./resolv.conf:/etc/resolv.conf

Restart the container

docker-compose up -d --force-recreate

Blocklists

Acknowledgement