diff --git a/charts/stable/pihole/docs/img/blocky-dns-ports.png b/charts/stable/pihole/docs/img/blocky-dns-ports.png deleted file mode 100644 index fbb01d7afe7..00000000000 Binary files a/charts/stable/pihole/docs/img/blocky-dns-ports.png and /dev/null differ diff --git a/charts/stable/pihole/docs/img/blocky-k8s-gateway.png b/charts/stable/pihole/docs/img/blocky-k8s-gateway.png deleted file mode 100644 index 46f9b1db170..00000000000 Binary files a/charts/stable/pihole/docs/img/blocky-k8s-gateway.png and /dev/null differ diff --git a/charts/stable/pihole/docs/img/blocky-upstream.png b/charts/stable/pihole/docs/img/blocky-upstream.png deleted file mode 100644 index 1457c3b0eb0..00000000000 Binary files a/charts/stable/pihole/docs/img/blocky-upstream.png and /dev/null differ diff --git a/charts/stable/pihole/docs/img/pihole-blocky-dns.png b/charts/stable/pihole/docs/img/pihole-blocky-dns.png deleted file mode 100644 index 50f7d898d78..00000000000 Binary files a/charts/stable/pihole/docs/img/pihole-blocky-dns.png and /dev/null differ diff --git a/charts/stable/pihole/docs/img/pihole-password.png b/charts/stable/pihole/docs/img/pihole-password.png deleted file mode 100644 index f2017109dbf..00000000000 Binary files a/charts/stable/pihole/docs/img/pihole-password.png and /dev/null differ diff --git a/charts/stable/pihole/docs/split-dns.md b/charts/stable/pihole/docs/split-dns.md index e540467c055..42cac47adc1 100644 --- a/charts/stable/pihole/docs/split-dns.md +++ b/charts/stable/pihole/docs/split-dns.md @@ -10,7 +10,7 @@ The below guide is not the recommended DNS solution for TrueCharts. We recommend ::: -## Install Blocky +## Deploy Blocky :::note[Blocky] @@ -18,42 +18,34 @@ Blocky includes k8s Gateway which automates the split DNS process. We will be us ::: -1. Install Blocky from the premium train with all defaults except for the following. +- Deploy Blocky +- Make sure k8s-Gateway is enabled. +- Assuming you would like to use PiHole for Allow/Deny list, configure Blocky that those list from blocky are disabled. To disable the Blocky Deny lists this can be used in the deployment of Blocky: -2. Override Default Upstreams +```yaml +clientGroupsBlock: + [] +``` - a. Here you can choose your upstream DNS servers of choice. In my example I am using Google. - ![blocky-upstream](./img/blocky-upstream.png) +## Deploy PiHole -3. Enable k8s-Gateway +Deploy PiHole with the following configuration: - a. Here you need to add your domain for split DNS. +- Namespace needs to be `privileged` +- Set a loadBalancerIP or Ingress to the `main` service +- Set a loadBalancerIP to the `dns` service +- `FTLCONF_webserver_api_password`, here you need to pick a password for the PiHole WebGUI. +- `FTLCONF_dns_upstreams`, here you need to set your Blocky DNS address. - ![k8s-gateway](./img/blocky-k8s-gateway.png) - -4. DNS TCP/UDP Port Configurations - - a. Since PiHole will be using port 53 for DNS we need to change the port on blocky to something else. The recommend port is 5335. If you are using MetalLB then this step is not needed. - - ![blocky-dns-ports](./img/blocky-dns-ports.png) - -## Install PiHole - -1. Install PiHole from the Stable train with all the defaults except for the following. - -2. Web Password - - a. Here you need to pick a password for the PiHole WebGUI. - - ![pihole-password](./img/pihole-password.png) - -3. DNS Servers - - a. Here you need to remove one of the pre-configured entries and change the other to your Blocky DNS address. In my example the address is my TrueNAS Scale server IP and the port we previously configured for Blocky. If you are using MetalLB this would just need to be the IP address assigned to Blocky. - - ![pihole-blocky-dns](./img/pihole-blocky-dns.png) +Example configuration: +```yaml +env: + FTLCONF_dns_upstreams: "${BLOCKY_IP}" + FTLCONF_webserver_api_password: "DitIsSuperGeheim" +``` ## Configure Router -1. Configure your router to use your PiHole DNS when configuring DNS clients. You will need to consult your router manual for this as each router is different. In my example I would configure my router to use 192.168.1.2 as the DNS server. If you use MetalLB this would be the IP address assigned to PiHole. +1. Configure your router to use your PiHole DNS when configuring DNS clients. You will need to consult your router manual for this as each router is different. +In above example, the router should be configured to use 192.168.1.221 as the DNS server.