Guide: How to install Pi-Hole on Gold (Beta)

Follow

Comments

73 comments

  • Avatar
    Larry Lindenbaum

    It's actually fairly simple, and this guide here descibes it pretty well:

    https://docs.docker.com/config/containers/container-networking/

    as does this one:

    https://runnable.com/docker/binding-docker-ports

    You can also use the "ports: HOST:CONTAINER" tags in the YAML config file to specify which ports you want exposed for a given container (since I think those other references talk more to exposing ports in an already running container).  

    The routing to/from the network itself would be configured in the Firewalla Gold app by creating your network segments and then rules to pass (or block) traffic between them.

     

    0
    Comment actions Permalink
  • Avatar
    Pimbox


    I've tried everything but I can't even ping the ip I selected for the pi-hole, I believe the docker has another ip and I don't know how to change it ... my network uses the 192.168.25.0/24 range

    if someone can help me, I will be more thanked!

    0
    Comment actions Permalink
  • Avatar
    Pimbox

    I follow exactly all steps, in the end the ip 172.16.0.2 ping normal, but when i try enter in pi-hole web site interface it show: the page canot be found. Some tip?

     

    ------------------------------------------------------------------------------------

    -----------------------------------------------------------------------------

     My Network is:

    Firewalla Gold eth0: My modem (bridged) connection (stactic ip).

    Firewalla gold eth1 (br1): Vlan in 192.168.25.9 ip (all my devices is in this network)

    Firewalla eth2 (br1): My Server with stactic network ip (192.168.25.222)

    Firewalla eth3 (br0): This port i need change the vlan because i link it in my wireless router wan port and it have a 192.168.25.0/24 in 4 lan ports and wi-fi ips too so WAN port need another range ip (192.168.24.9 in firewalla port)

    I try change the docker ip but its back to 172.17.0.1 when i restart the Firewalla Gold.

    I need fix it to run 2 (very light) dockers: 1 pi-hole and 1 TeamSpeak Server.

    I will be very grateful if anyone can help me, i tried to install the pi-hol keeping the default ipof the tutorial and it also didn´t work. ping the ip (172.16.0.2) but does not enter the page through the browser.

    Here is the picture of my Firewalla Gold config:

     

    0
    Comment actions Permalink
  • Avatar
    Joel Horner

    Be careful about using this on your Firewalla. It works great, for sure. BUT, the default for the logging database retention (365 days) is not overridden. Consequently, the database will continue to grow until it fills up the /data partition. This causes other problems with Firewalla.

    If one does wish to retain this solution running on the Firewalla, updating the pihole-FTL database retention period is recommended.

    As a general rule, I am now leaning toward not running anything but the core Firewalla services on the Firewalla Gold. The storage space seems pretty small and is likely sized for the core purpose of the Firewalla solution and updates.

    I've purchased a Raspberry Pi for the purpose of running ancillary solutions (Pi-hole, Homebridge, etc.). Although the prospect of running multiple services (containers) on the Firewalla is really attractive, weigh that desire against potentially losing Firewalla functionality.

    2
    Comment actions Permalink
  • Avatar
    Rob Abbott

    Thanks for the tip, this is really great info.  I would like to keep pi-hole on the firewalla, so I changed the database retention to 90 days. And I'll keep an eye on disk usage.   My FTL db was already at 508MB, it's been running a little under 90 days.

    Add "MAXDBDAYS=90" in /data/pi-hole/etc-pihole/pihole-FTL.conf and restart the container.

    The FTL db lives in the above directory so you can have a look there if you want to see how much storage it's consuming.

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Totally agree with @Joel, if you do plan to use a lot of storage, please leave the service off Firewalla. (or you can get a USB storage and use that instead) We get too many of these cases in our support, and it is wasting us a lot of time (which we can use for other things) supporting and debug disk full errors.

    0
    Comment actions Permalink
  • Avatar
    Blake

    Wow.  Mine is about 729 MB.  So do I trim this thing down?

     

    0
    Comment actions Permalink
  • Avatar
    Brian Newbold

    I updated pihole-FTL.conf to:
    DBINTERVAL=60
    MAXDBDAYS=30

    It will only write to the DB every 60 minutes in order to save the SD card.

    0
    Comment actions Permalink
  • Avatar
    Brian Newbold

    On Blue+ I'm deploying via portainer now, and have this YAML set up in Stacks. Working quite well and much easier to manage than going to SSH every 5 seconds.

    ---BEGIN YAML 4 PORTAINER STACK---

    version: '2'

    # More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
    services:
    pihole:
    container_name: pihole
    image: pihole/pihole:latest
    environment:
    - TZ=Los_Angeles/America
    - DNS1=192.168.86.1
    - DNS2=no
    # set a secure password here or the default will be firewalla
    - WEBPASSWORD=yopasswordherebruddah
    # Volumes store your data between container upgrades
    volumes:
    - '/data/pi-hole/etc-pihole/:/etc/pihole/'
    - './etc-dnsmasq.d/:/etc/dnsmasq.d/'
    - '/etc/localtime:/etc/localtime:ro'
    restart: unless-stopped
    network_mode: host
    dns:
    - 127.0.0.1
    - 192.168.86.1
    ports:
    - "53:53"
    - "443:443"
    - "80:80"

    0
    Comment actions Permalink
  • Avatar
    K Kaji

    @Firewalla,

    Totally agree with @Joel, if you do plan to use a lot of storage, please leave the service off Firewalla. (or you can get a USB storage and use that instead)

    I highly recommend you to add a note of this advice at the top of this article :)

    Anyway, I want to thank you for your efforts to develop such a great device, Firewalla Gold!

    0
    Comment actions Permalink
  • Avatar
    Rob Dennison

    I've had the network go down a couple of times now with no explanation, and the only solution is to reboot the Firewalla Gold and have all the devices in the network reacquire IP addresses. Further reflection (and reading this thread) tells me that it's likely the pi-hole container that's blowing up the Firewalla storage, and rebooting clears out that history.

    To me, this means it's really not viable for my network. Is there any way the OP can update the original post (OP?) to account for a change to the pihole-FTL.conf to cap the storage?

    Either that, or maybe the better solution is to run pi-hole on a RPi on a new subnet (discussed here: https://help.firewalla.com/hc/en-us/articles/360062551673-How-to-run-external-pi-hole-on-the-Firewalla-Gold , but there are different issues there), which could maybe use a tutorial?

    Honestly, I'd poke around on it myself, but the amount of time the network would be down while I messed things up and corrected isn't feasible with 2 people WFH and 2 kids SFH here. Smarter people than me probably know how to set this up without having to experiment much.

    Thoughts?

    0
    Comment actions Permalink
  • Avatar
    Ma Ar

    It appears to me that there is some kind of exploit in cloudflared container. I have my setup regularly breached and the logs are pointing to a large amount of activity in dockerd.

    0
    Comment actions Permalink
  • Avatar
    Chris Hewitt

    @Ma At

    Not sure what you mean. Can you explain what you mean that your “set-up [is] regularly breached?” What “exploit” do you think you are seeing?

    What “Cloudflared container”? Are you using Cloudflare DNS over HTTPS in your Pi-Hole docker?

    Can you share the logs?

    0
    Comment actions Permalink

Please sign in to leave a comment.