Skip to content

Commit

Permalink
Update pi-hole-stubby.md
Browse files Browse the repository at this point in the history
  • Loading branch information
mrjones-plip authored Apr 28, 2024
1 parent c180677 commit 0f6fc32
Showing 1 changed file with 3 additions and 22 deletions.
25 changes: 3 additions & 22 deletions docs/admins/pi-hole-stubby.md
Original file line number Diff line number Diff line change
@@ -1,27 +1,8 @@
# Pi-Hole and Stubby
# Pi-Hole a
SYN Shop runs it's own instances of [Pi-Hole](http://pi-hole.net/) Pi-Hole is a local DNS resolver that blacklist domains that serve ads.

SYN Shop runs it's own instances of [Pi-Hole](http://pi-hole.net/) and [Stubby](https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby) so that our DNS is both encrypted on the wire and ad free. They're largely set up like [mrjones' blog post](https://blog.plip.com/2018/04/22/stubby-pi-hole-quad9-lxd/). Pi-Hole is a local DNS resolver that blacklist domains that serve ads. Stubby is a local DNS proxy that accepts unencupted DNS requests and relays them to an upstream resolver via DNS over TLS (DoT). We currently use [Quad 9](https://quad9.com/) for upstream DNS service as they don't log and IPs or queries.
Pi-hole LXC is hosted on the Proxmox server.

All VMs are hosted on the c220 running LXD.

## Stubby

### 16.04
For Ubuntu 16.04, follow mrjones' blog post link above for compiling from source.

### 18.04
For Ubuntu 18.04, just run ``apt-get install stubby``. You'll have to comment out ``DynamicUser=true`` in ``/lib/systemd/system/stubby.service`` and then run ``systemctl daemon-reload``

### Shared

Both 16.04 and 18.04 have the same config after you've installed it per the steps above. Edit ``/etc/stubby/stubby.yml`` so that it's only listening on ``127.1.1.1`` (no IPv6) and is only relaying to Quad9. For synshop-unfiltered network/wifi, use 9.9.9.10. For synshop wifi, use 9.9.9.9.

Be sure to have it enabled and started:

```
systemctl enable stubby
systemctl start stubby
```

## Pi-Hole

Expand Down

0 comments on commit 0f6fc32

Please sign in to comment.