this post was submitted on 16 Dec 2025
219 points (96.2% liked)

Selfhosted

53744 readers
480 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I've run Pi-hole in my homelab for years and benefited from using the service. As well as the hands-on education.

With that said, what is everyone else's experience with the software? Do you use Pi-hole in your homelab setup? I would assume many hundreds of thousands of people use Pi-hole.

Edit #1:

The image attached to this post is my RPi 5, which hosts the Pi-hole software. Big supporter of the whole "SBCs for learning and home improvement" mentality.

Edit #2:

It is interesting to see the broad support for Pi-hole and DNS blockers in general. The more options, the healthier the tech ecosystem is, which benefits everyone.

top 50 comments
sorted by: hot top controversial new old
[–] certified_expert@lemmy.world 68 points 2 days ago (1 children)

I am one of those zillion users. I love it.

[–] nymnympseudonym@piefed.social 58 points 2 days ago (1 children)

I feel bad for households without a nerd to set up the family pihole

Like families where nobody cooks

[–] markstos@lemmy.world 9 points 2 days ago (7 children)

You have never had some family member experience a broken website that they needed to work but you were not around to fix it on the server side?

[–] Evil_Incarnate@sopuli.xyz 9 points 2 days ago

That's the reason I no longer have a pihole..

[–] Dultas@lemmy.world 3 points 2 days ago

I set a separate SSID on the wifi without the pihole as the DNS provided by DHCP that they can use.

load more comments (5 replies)
[–] a@852260996.91268476.xyz 26 points 2 days ago (1 children)

@bernhoftbret@lemmy.world pihole is great. I use AdGuard now but either is good. The important thing is having a dns server at home

[–] bernhoftbret@lemmy.world 15 points 2 days ago

Agreed. DNS filtering is an important tool for safety, privacy and general well-being.

[–] danielquinn@lemmy.ca 18 points 1 day ago (6 children)

I installed a Pi-Hole largely to serve as a local DNS, but enabled the ad-blocking 'cause it seemed silly not to. My wife got very upset. Apparently she likes the ads.

With that aside though, it seems to work quite well. Just make sure to (a) use a reasonably-powered device (my Pi Zero appears to be taxed by it) and you should probably use an Ethernet connection 'cause my Pi Zero regularly flakes out so DNS requests fail due to the IP being "unreachable" for a half second.

[–] somegeek@programming.dev 13 points 1 day ago

Apparently she likes the ads

Must be to most wife thing I've ever heard :)))

[–] Darkassassin07@lemmy.ca 12 points 1 day ago (1 children)

My wife got very upset. Apparently she likes the ads.

Set static IPs for her devices, then whitelist that device IP past the block lists by adding it to a group, then regex allow domain: '*' for that group.

load more comments (1 replies)
load more comments (4 replies)
[–] sylver_dragon@lemmy.world 15 points 2 days ago (1 children)

I run Pi-Hole in a docker container on my server. I never saw the point in having a dedicated bit of hardware for it.
That said, I don't understand how people use the internet without one. The times I have had to travel for work, trying to do anything on the internet reminded me of the bad old days of the '90s with pop-ups and flashing banners enticing me to punch the monkey. It's just sad to see one of the greatest communications platforms we have ever created reduced to a fire-hose of ads.

[–] Vendetta9076@sh.itjust.works 11 points 2 days ago (1 children)

Thats what ublock is for. But yes.

[–] sylver_dragon@lemmy.world 3 points 2 days ago

Ya, I actually run both uBlock Origin and NoScript in my browser on my phone and personal machine (desktop). On my work laptop, those are a no-go. So, I get the full ads experience on my work machine when traveling.

[–] irmadlad@lemmy.world 13 points 2 days ago (1 children)

I use Pi-Hole unbound, and I really like it. However, Technitium seems to be the new favorite and has a lot of bells and whistles that Pi-Hole doesn't. I haven't run Technitium basically because Pi-Hole fits my needs. If I were just starting out, I would probably consider Technitium.

[–] iturnedintoanewt@lemmy.world 4 points 2 days ago (2 children)

I'll have to check on this one, never heard of it, and unbound has a tendency to randomly fail on me after a few months.

[–] circuscritic@lemmy.ca 4 points 2 days ago

I have Unbound configured on my pihole, it's been running fine for years.

load more comments (1 replies)
[–] AMillionMonkeys@lemmy.world 13 points 2 days ago (1 children)

I have pihole running on an old Raspberry Pi B and it just chugs along. Except for the wonky update they put out a few months ago. That took some cleaning up after.
I check the dashboard a few times a day and it's a good way to notice network issues and misbehaving programs.
I'm also running it through cloudflared to encrypt the requests, in case my ISP is snooping on them.

load more comments (1 replies)
[–] orbituary@lemmy.dbzer0.com 11 points 2 days ago (1 children)

Indispensible.

A longer answer would come out of: "What do you think of a home lab environment without Pi-Hole?"

[–] retro@infosec.pub 5 points 2 days ago

Dispensible

[–] GreenKnight23@lemmy.world 8 points 2 days ago

pihole has got the best UX for DNS management hands down. it's easy, not overly complicated, and perfect for entry-level selfhosting.

the fact that it actively blocks ads is a bonus.

[–] bobthecowboy@lemmy.world 8 points 2 days ago (1 children)

PiHole 4b powering my home DNS. Been running for ~4 years as of next month (and still on the original SD card I installed it to!). 100% recommend.

[–] metaStatic@kbin.earth 6 points 2 days ago (1 children)

and still on the original SD card

incredibly lucky. my Pi burned through so many cards I wouldn't use it for a pihole again, especially when mini pcs are better and cheaper

(and before anyone asks yes I was logging to ram)

[–] The_Jit@lemmy.world 4 points 2 days ago

3B on the original SD card still. But I also use log2ram to help reduce writes to the SD card.

[–] 4am@lemmy.zip 8 points 2 days ago

I preferred AdGuardHome over PiHole, but currently my servers are collecting dust as I need to get electrical work done before I can hook them up.

It really sucks…

[–] swizzlestick@lemmy.zip 7 points 2 days ago (2 children)

It's fine, did the job for me at the time. Just wanted the ad and nasty blocking. Keeping it and the filters up to date is easy.

Now have a pfSense box with pfBlocker-NG, which does essentially the same thing. Also runs Snort as an additional layer, and makes penning in IoT stuff possible.

load more comments (2 replies)
[–] some_guy@lemmy.sdf.org 7 points 2 days ago
[–] bneu@feddit.org 6 points 2 days ago (1 children)

Sadly, it was very bad. I tried it about five years ago on a Pi 4. In less than a year, the Pi crashed five or more times. Once it was due to a faulty SD card, and on several occasions it was due to other software on the Pi crashing. Each time, the internet went down, which made my family unhappy, especially when I was not at home and could not fix it.

I also saw little benefit as I already block ads on all my devices, and my smart home stuff has no internet access at router level.

I haven't tried it since. Should I try again now with redundancy? What are the benefits?

[–] Darkassassin07@lemmy.ca 7 points 2 days ago* (last edited 2 days ago)

A bit of redundancy is key.

I have my primary DNS, pihole, running on an RPI that's dedicated to it; as well as a second backup version running in a docker container on my main server machine.

Nebula-Sync keeps the two synchronized with eachother, so if a change is made on one, it automatically syncs to the other. (things like local dns records or changes to blocklists).

If either one goes down (dead sd cards, me playing with things, power surges, whatever); the other picks up the slack until I fix the broken one, which is usually little more than re-install, then manually sync them using piholes 'teleporter' settings. Worse case, restore a backup (That you're definitely taking. Regularly. Right?)

Both piholes use Cloudflared (here's their guide *edit: I see I'll have to find a new method for this... Just going to pin the containers to tag '2025.11.1' for now) to translate ALL dns traffic into DOH traffic, encrypting it and using the provider of my choice, instead of my ISP or any other plain DNS. The router hands out both local DNS IPs with DHCP because Port 53 outbound (regular dns) is blocked at the router, so all LAN devices MUST use the local DNS or their own DOH config. Plain DNS won't make it out.

DNS adblocking isn't perfect, but it's a really nice tool to have. Then having an internal DNS to resolve names for local-only services is super handy. Most of my subdomains are only used internally, so pihole handles those DNS records, while external DNS only has the records for publicly accessible things.

[–] possiblylinux127@lemmy.zip 5 points 2 days ago* (last edited 2 days ago) (1 children)

Technitium DNS Server is a bit more feature rich but honesty I would just run a DNS filter on your router

load more comments (1 replies)
[–] beerclue@lemmy.world 5 points 2 days ago

I used pihole for years, but the recent updates made me look for alternatives. There was a major (v6?) update fuckup, but also some random freezes and block lists going missing...

Looking for alternatives, I tried out Technitium. Extremely easy to set up, rock solid, running steady for about 6 months (with frequent updates), and they recently introduced built in high-availability.

[–] curbstickle@anarchist.nexus 4 points 2 days ago

I use technitium, but there is nothing "wrong" with using a pihole. I used to run several (containers, plus one physical), and have set up quite a few for family and friends.

[–] plateee@piefed.social 4 points 2 days ago

Maybe a controversial take, but I like pihole for blocking only - I have a pair of powerDNS servers set up for my internal name resolution. They recurse to Pihole, but can fall back to internet DNS servers if Pihole isn't responsive.

I tried pihole for local resolution and found it to be a fairly large pain to automate. Plus kubes has PDNS hooks for auto-updating DNS entries.

[–] philpo@feddit.org 4 points 2 days ago (1 children)

Not a fan of Pi-hole itself, but other than that,why not?

(Technitium DNS has some advantages down the road)

[–] SCmSTR@lemmy.blahaj.zone 3 points 2 days ago (1 children)

Oh, why don't you like pi-hole?

[–] philpo@feddit.org 4 points 1 day ago

Pihole has a few drawbacks when your systen grows - a lot of things then need to be done by hand that others do either automated or at least easier.

Personally I have become very fond of technitium - it does everything you will ever need and the main drawback is that it seems so fucking overwhelming initially. But: Once you figured out that you basically only need 10% of the fields it becomes easier. And it's fucking solid and just works and works and works.

[–] perry@aussie.zone 4 points 1 day ago

Success story here. 6+ years running pihole on proxmox as my primary DNS for everything on my network. It’s never missed a beat, never crashed. I update infrequently. It’s just good software.

[–] picnic@lemmy.world 4 points 2 days ago (1 children)

I have that virtualized, times three. Two to have a failover, and third one with different settings for my kids (cloudflare's family dns)

[–] nul9o9@lemmy.dbzer0.com 3 points 2 days ago

Holy moly. Mine is virtualized as well, but with no fail overs.

[–] bluetardis@sh.itjust.works 4 points 2 days ago

To anyone having issues running on a pi it’s likely either or both of the following item -cheap 5v power supply. Yes you can use an old phone charger but it won’t cut it for long term usage. Get a quality unit or better yet the branded pihole charger. We ended up with a Poe hat that it runs off. Sorted Ethernet and power supply.

-memory card. Buy a quality, fast card and you will be fine.

Going on 8 years with my current pi setup. One failure around 6 years in which was the memory card

[–] dutchkimble@lemy.lol 4 points 2 days ago

I prefer using NextDNS, so that it works wherever I am

[–] _spiffy@piefed.ca 4 points 2 days ago

I love it! It took me a bit to iron out all the kinks with my network, but I am completely happy with it now.

[–] DonStuttgart1974@feddit.org 4 points 1 day ago

I had a look at it but didn't use it for longer, I used adguard later in a lxc container later, since i didn't see a point in using a different device, right now the adguard is running as a service on my opnsense so i don't have to rely on something other than the router for internet. I like the option to block on a dns level, and to be fair it's always a similar set of blocklists that can be used, the major difference is in the preselection. right now I could probably switch back to the default opnsense dns server and add the lists there, only losing the info on what has been blocked.

[–] pound_heap@lemmy.dbzer0.com 3 points 2 days ago

I'm running one Pi-hole, but not on RPi. One is an LXC container on my Proxmox host, another is on dedicated Dell Wyse thin client box.

[–] Sanctus@anarchist.nexus 3 points 2 days ago

My pi 1b handles the internal DNS for my game servers, which at this point is actually just minecraft because PSO:BB was way harder to setup than I thought. It works and it is extremely easy and it still holes all the tracking stuff too.

[–] JonhhyWanker@sh.itjust.works 3 points 2 days ago (1 children)

I use a RPi 5 running docker for: Pi-Hole, Jellyfin, Home Assistant, Heimdall. Works great, and there's still capacity left to add more services.

[–] bernhoftbret@lemmy.world 3 points 2 days ago (1 children)

It's amazing what you can do with modern computers. The number of services you are running on that RPi 5 is impressive.

Hadn't heard of Heimdall until you mentioned it. That looks like a fun tool to use.

[–] irmadlad@lemmy.world 4 points 2 days ago (1 children)

Hadn’t heard of Heimdall

If you're looking for a dashboard, there are quite a few of them. I use Homarr, but there is:

  • Homer
  • HomePage
  • Dashy
  • dashdot
  • Starbase-80

.........

[–] bernhoftbret@lemmy.world 3 points 2 days ago (1 children)

I have tried Dashy and enjoyed having a dashboard.

Out of those mentioned, Heimdall looks like the top contender. I need to ponder if a dashboard is a good move.

load more comments (1 replies)
[–] Chaser@lemmy.zip 3 points 2 days ago

I run pihole without any problems as a docker container. I assume you want to ask how well it works to add custom records, because that's what you usually do with a dns server.

Adding single records with the web ui works just fine. However, adding wildcards isn't possible. So you end up attaching a terminal to your container and adding dnsmasq configs yourself. This is a bit poor.

On the other hand: How often do you need to add wildcards? I needed like 2 entries since I set up pihole a few years ago.

load more comments
view more: next ›