DNS Server
Tutorials
DNS over HTTPS (DoH)
Secure DNS
- DNS settings to avoid email spoofing and phishing for unused domain - nixCraft (cyberciti.biz)
- How to test and validate DNSSEC using dig command line - nixCraft (cyberciti.biz)
Adguard Home
NSD
- NSD Tutorial Updated for 2024: Now With Zone Transfers! - LowEndBox
- How To Use NSD, an Authoritative-Only DNS Server, on Ubuntu 14.04 | DigitalOcean
Pi-hole
Pi-hole - A DNS-based advertisement blocker
- Pi-hole – Network-wide Ad Blocking
- How to Set Up Pi-hole to Get an Ad-free Life
- 7 Things I Wish I Knew Before Running a Pi-hole
docker-compose.yaml :
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
services:
pihole:
container_name: pihole
image: pihole/pihole:latest
container_name:ports:
pihole# restart:DNS always
ports:Ports
- "53:53/tcp"
- "53:53/udp"
dns:# Default HTTP Port
- 127.0.0.1"80:80/tcp"
# Default HTTPs Port. FTL will generate a self-signed certificate
- 1.1.1.1"443:443/tcp"
# Uncomment the line below if you are using Pi-hole as your DHCP server
#- "67:67/udp"
# Uncomment the line below if you are using Pi-hole as your NTP server
#- "123:123/udp"
environment:
# Set the appropriate timezone for your location (https://en.wikipedia.org/wiki/List_of_tz_database_time_zones), e.g:
TZ: 'America/Chicago'Asia/Taipei'
WEBPASSWORD:# Set a password to access the web interface. Not setting one will result in a random password being assigned
FTLCONF_webserver_api_password: 'password'correct PIHOLE_DNS_:horse 1.1.1.1;9.9.9.9battery DNSSEC:staple'
# If using Docker's default `bridge` network setting the dns listening mode should be set to 'false'ALL'
WEBTHEME:FTLCONF_dns_listeningMode: default-dark'ALL'
# Volumes store your data between container upgrades
volumes:
# For persisting Pi-hole's databases and common configuration file
- '~./homelabservices/pihole/etc-pihole:/etc/pihole/'pihole'
-# Uncomment the below if you have custom dnsmasq config files that you want to persist. Not needed for most starting fresh with Pi-hole v6. If you're upgrading from v5 you and have used this directory before, you should keep it enabled for the first v6 container start to allow for a complete migration. It can be removed afterwards. Needs environment variable FTLCONF_misc_etc_dnsmasq_d: '~true'
#- './homelabservices/pihole/etc-dnsmasq.d:/etc/dnsmasq.d/'d'
networks:cap_add:
# See https://docs.pi-hole.net/docker/#note-on-capabilities
# Required if you are using Pi-hole as your DHCP server, else not needed
- piholeNET_ADMIN
networks:# pihole:Required driver:if bridgeyou name:are piholeusing Pi-hole as your NTP client to be able to set the host's system time
- SYS_TIME
# Optional, if Pi-hole should get some more processing time
- SYS_NICE
restart: unless-stopped
Technitium
Self host a DNS server for privacy & security