Pi-Hole + Unbound on Docker

Use Docker to run Pi-Hole with an upstream Unbound resolver

• Install Unbound directly into the Pi-Hole container
  • This configuration contacts the DNS root servers directly, please read the Pi-Hole docs on Pi-hole as All-Around DNS Solution to understand what this means.
  • With this approach, we can also simplify our Docker networking since macvlan is no longer necessary.

Updates

This image is regularly update with the latest release from the official pi-hole image.

Whenever there is an update for the original pihole image a Github Action publishes an update for this image with the new image.

The workflow file for this can be found in .github/workflows/auto-build-container.yml

Description

This Docker deployment runs both Pi-Hole and Unbound in a single container.

The base image for the container is the official Pi-Hole container, with an extra build step added to install the Unbound resolver directly into to the container based on instructions provided directly by the Pi-Hole team.

Usage

First create a .env file to substitute variables for your deployment.

Pi-hole environment variables

Vars and descriptions replicated from the official pihole container:

Variable	Default	Value	Description
TZ	UTC	<Timezone>	Set your timezone to make sure logs rotate at local midnight instead of at UTC midnight.
WEBPASSWORD	random	<Admin password>	http://pi.hole/admin password. Run docker logs pihole | grep random to find your random pass.
FTLCONF_LOCAL_IPV4	unset	<Host's IP>	Set to your server's LAN IP, used by web block modes and lighttpd bind address.
REV_SERVER	false	<"true"|"false">	Enable DNS conditional forwarding for device name resolution
REV_SERVER_DOMAIN	unset	Network Domain	If conditional forwarding is enabled, set the domain of the local network router
REV_SERVER_TARGET	unset	Router's IP	If conditional forwarding is enabled, set the IP of the local network router
REV_SERVER_CIDR	unset	Reverse DNS	If conditional forwarding is enabled, set the reverse DNS zone (e.g. 192.168.0.0/24)
WEBTHEME	default-light	<"default-dark"|"default-darker"|"default-light"|"default-auto"|"lcars">	User interface theme to use.
VIRTUAL_HOST	$FTLCONF_LOCAL_IPV4	<Custom Hostname>	What your web server 'virtual host' is, accessing admin through this Hostname/IP allows you to make changes to the whitelist / blacklists in addition to the default 'http://pi.hole/admin' address

Example .env file in the same directory as your docker-compose.yaml file:

FTLCONF_LOCAL_IPV4=192.168.1.10
TZ=America/Los_Angeles
WEBPASSWORD=QWERTY123456asdfASDF
REV_SERVER=true
REV_SERVER_DOMAIN=local
REV_SERVER_TARGET=192.168.1.1
REV_SERVER_CIDR=192.168.0.0/16
HOSTNAME=pihole
DOMAIN_NAME=pihole.local
PIHOLE_WEBPORT=80
WEBTHEME=default-light
VIRTUAL_HOST=pihole.box

Running the stack

docker-compose up -d

If using Portainer, just paste the docker-compose.yaml contents into the stack config and add your environment variables directly in the UI.

Building the image locally

• Clone this repo to you machine
• Run the commands below

cd docker-pihole-unbound
docker build . -t dev/docker-pihole-unbound:latest

Contributors

Thank you to all contributors for help making this project better.