Pihole ist ein Netzwerk-Werbeblocker. Pihole als [[DNS]] Server einstellen und er blockt alle Requests zu Werbeseiten.

=====Docker Setup=====

<code yaml>
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
services:
  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    ports:
      # DNS Ports
      - "53:53/tcp"
      - "53:53/udp"
      # Default HTTP Port
      - "80:80/tcp"
      # Default HTTPs Port. FTL will generate a self-signed certificate
      - "443:443/tcp"
      # Uncomment the line below if you are using Pi-hole as your DHCP server
      #- "67:67/udp"
      # Uncomment the line below if you are using Pi-hole as your NTP server
      #- "123:123/udp"
    environment:
      # Set the appropriate timezone for your location (https://en.wikipedia.org/wiki/List_of_tz_database_time_zones), e.g:
      TZ: 'Europe/London'
      # Set a password to access the web interface. Not setting one will result in a random password being assigned
      FTLCONF_webserver_api_password: 'correct horse battery staple'
      # If using Docker's default `bridge` network setting the dns listening mode should be set to 'all'
      FTLCONF_dns_listeningMode: 'all'
    # Volumes store your data between container upgrades
    volumes:
      # For persisting Pi-hole's databases and common configuration file
      - './etc-pihole:/etc/pihole'
      # Uncomment the below if you have custom dnsmasq config files that you want to persist. Not needed for most starting fresh with Pi-hole v6. If you're upgrading from v5 you and have used this directory before, you should keep it enabled for the first v6 container start to allow for a complete migration. It can be removed afterwards. Needs environment variable FTLCONF_misc_etc_dnsmasq_d: 'true'
      #- './etc-dnsmasq.d:/etc/dnsmasq.d'
    cap_add:
      # See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
      # Required if you are using Pi-hole as your DHCP server, else not needed
      - NET_ADMIN
      # Required if you are using Pi-hole as your NTP client to be able to set the host's system time
      - SYS_TIME
      # Optional, if Pi-hole should get some more processing time
      - SYS_NICE
    restart: unless-stopped
</code>

=====PyHole Klon=====

<code bash>
#!/bin/bash

BLOCKLIST_URL="https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
ZONE_DIR="/etc/bind/zones"
ZONE_CONF="/etc/bind/named.conf.blocked"

mkdir -p "$ZONE_DIR"
echo "// Auto-generated zone definitions" > "$ZONE_CONF"

# Domains extrahieren, Duplikate entfernen
curl -s "$BLOCKLIST_URL" | grep "^0.0.0.0" | awk '{print $2}' | sort -u | while read domain; do
  # Erstelle pro Domain eine eigene Zone-Datei
  zone_file="$ZONE_DIR/db.${domain}"
  cat > "$zone_file" <<EOF
\$TTL    86400
@       IN      SOA     localhost. root.localhost. (
                              2         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         86400 )        ; Negative Cache TTL
;
        IN      NS      localhost.
        IN      A       0.0.0.0
*       IN      A       0.0.0.0
EOF

  # Füge die Zone in die named.conf.blocked ein
  echo "zone \"$domain\" IN {" >> "$ZONE_CONF"
  echo "    type master;" >> "$ZONE_CONF"
  echo "    file \"$zone_file\";" >> "$ZONE_CONF"
  echo "};" >> "$ZONE_CONF"
done
</code>