Pi-Hole - Revision history

J7: typos

2026-02-27T20:18:50Z

typos

← Older revision		Revision as of 20:18, 27 February 2026
Line 17:		Line 17:
	</syntaxhighlight>		</syntaxhighlight>

	~~You can test~~ if it's working		Test if it's working

	<syntaxhighlight>		<syntaxhighlight>
Line 55:		Line 55:
	</syntaxhighlight>		</syntaxhighlight>
	Test pihole web interface at https://localhost:443		Test pihole web interface at https://localhost:443

	Now you can set your router's DNS server to the IP of the host running pihole and blocked domains should not be resolved.		Now you can set your router's DNS server to the IP of the host running pihole and blocked domains should not be resolved.

J7 at 20:16, 27 February 2026

2026-02-27T20:16:56Z

← Older revision		Revision as of 20:16, 27 February 2026
Line 54:		Line 54:
	};		};
	</syntaxhighlight>		</syntaxhighlight>
	~~Now blocked domains will not be resolved and you can access~~ pihole web interface at https://localhost:443		Test pihole web interface at https://localhost:443
			Now you can set your router's DNS server to the IP of the host running pihole and blocked domains should not be resolved.

J7: /* corrected typos and reformatted */

2026-02-27T20:12:02Z

corrected typos and reformatted

← Older revision		Revision as of 20:12, 27 February 2026
Line 5:		Line 5:
	services.pihole-ftl = {		services.pihole-ftl = {
	enable = true;		enable = true;
	~~openFirewallDNS = true; # Open port 53 (DNS traffic)~~		settings = {
	settings = { # See <https://docs.pi-hole.net/ftldns/configfile/>		# See <https://docs.pi-hole.net/ftldns/configfile/>
	dns.upstreams = [ "9.9.9.9" "1.1.1.1" ]; # ~~Use Quad9/Cloudflare's DNS Servers~~
	hosts = [ "192.168.1.188 ~~some~~.domain" ]; ~~# Optionally resolve local domains~~		# External DNS Servers quad9 and cloudflare
			dns.upstreams = [ "9.9.9.9" "1.1.1.1" ];

			# Optionally resolve local hosts (domain is optional)
			dns.hosts = [ "192.168.1.188 hostname.domain" ];
	};		};
	};		};
	</syntaxhighlight>		</syntaxhighlight>

	You can test it's working		You can test if it's working

	<syntaxhighlight>		<syntaxhighlight>
	$ systemctl status pihole-ftl.service		$ systemctl status pihole-ftl.service
	$ ~~dig @localhost~~ nixos.org		$ nslookup nixos.org localhost
			$ nslookup hostname.domain localhost
	</syntaxhighlight>		</syntaxhighlight>

	~~Now, setting your routers DNS server to your IP will direct your traffic to the Pi-Hole. Blocked domains will not be resolved.~~		== Adding lists and enabling web interface ==

	== Adding lists ==
	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	services.pihole-ftl = {		services.pihole-ftl = {
	enable = true;		enable = true;
	~~openFirewallDNS = true; # Open port 53 (DNS traffic)~~		settings = {
	settings = { # See <https://docs.pi-hole.net/ftldns/configfile/>		# See <https://docs.pi-hole.net/ftldns/configfile/>
	dns.upstreams = [ "9.9.9.9" "1.1.1.1" ]; # ~~Use Quad9/Cloudflare's DNS Servers~~
	hosts = [ "192.168.1.188 ~~some~~.domain" ]; ~~# Optionally resolve local domains~~		# External DNS Servers quad9 and cloudflare
			dns.upstreams = [ "9.9.9.9" "1.1.1.1" ];

			# Optionally resolve local hosts (domain is optional)
			dns.hosts = [ "192.168.1.188 hostname.domain" ];
	};		};

	lists = [ # Lists can be added via URL		lists = [ # Lists can be added via URL
	{		{
Line 36:		Line 44:
	type = "block";		type = "block";
	enabled = true;		enabled = true;
	description = "~~Sample~~ blocklist ~~by hagezi~~";		description = "hagezi blocklist";
	}		}
	];		];
	};		};
	services.pihole-web = { ~~# If lists are enabled then pihole-web must be configured~~
			services.pihole-web = {
	enable = true;		enable = true;
	ports = [ "443s" ];		ports = [ "443s" ];
	};		};
	</syntaxhighlight>		</syntaxhighlight>
			Now blocked domains will not be resolved and you can access pihole web interface at https://localhost:443
	Now you can access pihole web interface at https://localhost:443

J7: /* pihole configuration */

2026-02-27T13:00:44Z

pihole configuration

← Older revision		Revision as of 13:00, 27 February 2026
Line 16:		Line 16:

	<syntaxhighlight>		<syntaxhighlight>
	systemctl status pihole-ftl.service		$ systemctl status pihole-ftl.service
	dig @localhost nixos.org		$ dig @localhost nixos.org
	</syntaxhighlight>		</syntaxhighlight>

J7: /* Adding lists */

2026-02-27T12:57:45Z

Adding lists

← Older revision		Revision as of 12:57, 27 February 2026
Line 25:		Line 25:
	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	services.pihole-ftl = {		services.pihole-ftl = {
			enable = true;
			openFirewallDNS = true; # Open port 53 (DNS traffic)
			settings = { # See <https://docs.pi-hole.net/ftldns/configfile/>
			dns.upstreams = [ "9.9.9.9" "1.1.1.1" ]; # Use Quad9/Cloudflare's DNS Servers
			hosts = [ "192.168.1.188 some.domain" ]; # Optionally resolve local domains
			};
	lists = [ # Lists can be added via URL		lists = [ # Lists can be added via URL
	{		{

J7: /* Minimal Configuration Example and add optional blocklists */

2026-02-27T12:09:01Z

Minimal Configuration Example and add optional blocklists

← Older revision		Revision as of 12:09, 27 February 2026
Line 4:		Line 4:
	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	services.pihole-ftl = {		services.pihole-ftl = {
	enable = true;		enable = true;
	openFirewallDNS = true; # ~~To open~~ port 53 ~~for~~ DNS traffic		openFirewallDNS = true; # Open port 53 (DNS traffic)
			settings = { # See <https://docs.pi-hole.net/ftldns/configfile/>
			dns.upstreams = [ "9.9.9.9" "1.1.1.1" ]; # Use Quad9/Cloudflare's DNS Servers
			hosts = [ "192.168.1.188 some.domain" ]; # Optionally resolve local domains
			};
			};
			</syntaxhighlight>

			You can test it's working

			<syntaxhighlight>
			systemctl status pihole-ftl.service
			dig @localhost nixos.org
			</syntaxhighlight>

	~~# Settings documented at <https://docs.pi~~-~~hole.net/ftldns/configfile/>~~		Now, setting your routers DNS server to your IP will direct your traffic to the Pi-Hole. Blocked domains will not be resolved.
	~~settings = {~~
	~~dns~~.~~upstreams = [ "9.9.9.9" "1.1.1.1" ]; # To use Quad9 and Cloudflare's DNS Servers~~
	~~hosts = [ # Optionally resolve local~~ domains
	~~"192.168.1.188 some~~.~~domain"~~
	];
	};

	# Lists can be added via URL		== Adding lists ==
	~~lists = [~~		<syntaxhighlight lang="nix">
	{		services.pihole-ftl = {
	url = "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt";		lists = [ # Lists can be added via URL
	type = "block";		{
	enabled = true;		url = "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt";
	description = "Sample blocklist by hagezi";		type = "block";
	}		enabled = true;
	];		description = "Sample blocklist by hagezi";
			}
			];
	};		};
	~~</syntaxhighlight>At your option, a~~ web ~~interface can be~~ enabled ~~via <code>services.~~pihole-web.enable = true;</~~code~~>~~. You will have to open the corresponding ports when doing so.~~		services.pihole-web = { # If lists are enabled then pihole-web must be configured
			enable = true;
			ports = [ "443s" ];
			};
			</syntaxhighlight>

	Now~~, setting your routers DNS server to your IP will direct your traffic to the Pi-Hole. Blocked domains will not be resolved.~~		Now you can access pihole web interface at https://localhost:443

J7: /* Minimal Configuration Example */

2026-02-27T11:05:56Z

Minimal Configuration Example

← Older revision		Revision as of 11:05, 27 February 2026
Line 9:		Line 9:
	# Settings documented at <https://docs.pi-hole.net/ftldns/configfile/>		# Settings documented at <https://docs.pi-hole.net/ftldns/configfile/>
	settings = {		settings = {
	dns.upstreams = [ "1.1.1.1" ]; # To use Cloudflare's DNS Servers		dns.upstreams = [ "9.9.9.9" "1.1.1.1" ]; # To use Quad9 and Cloudflare's DNS Servers
	hosts = [ # Optionally resolve local domains		hosts = [ # Optionally resolve local domains
	"192.168.~~178~~.188 some.domain"		"192.168.1.188 some.domain"
	];		];
	};		};

J7 at 10:59, 27 February 2026

2026-02-27T10:59:46Z

← Older revision		Revision as of 10:59, 27 February 2026
Line 18:		Line 18:
	lists = [		lists = [
	{		{
	url = "https://~~cdn~~.~~jsdelivr~~.~~net/gh~~/hagezi/dns-blocklists~~@latest~~/adblock/pro.txt";		url = "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt";
	type = "block";		type = "block";
	enabled = true;		enabled = true;

O5-J: Add very minimal Pi-Hole Example for others to expand

2026-01-29T16:40:18Z

Add very minimal Pi-Hole Example for others to expand

New page

[https://pi-hole.net/ Pi-Hole] is a DNS service that functions as network ad-blocker.

== Minimal Configuration Example ==
<syntaxhighlight lang="nix">
services.pihole-ftl = {
enable = true;
openFirewallDNS = true; # To open port 53 for DNS traffic

# Settings documented at <https://docs.pi-hole.net/ftldns/configfile/>
settings = {
dns.upstreams = [ "1.1.1.1" ]; # To use Cloudflare's DNS Servers
hosts = [ # Optionally resolve local domains
"192.168.178.188 some.domain"
];
};

# Lists can be added via URL
lists = [
{
url = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.txt";
type = "block";
enabled = true;
description = "Sample blocklist by hagezi";
}
];
};
</syntaxhighlight>At your option, a web interface can be enabled via <code>services.pihole-web.enable = true;</code>. You will have to open the corresponding ports when doing so.

Now, setting your routers DNS server to your IP will direct your traffic to the Pi-Hole. Blocked domains will not be resolved.