Dies ist eine alte Version des Dokuments!
Pihole ist ein Netzwerk-Werbeblocker. Pihole als DNS Server einstellen und er blockt alle Requests zu Werbeseiten.
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/ services: pihole: container_name: pihole image: pihole/pihole:latest ports: # DNS Ports - "53:53/tcp" - "53:53/udp" # Default HTTP Port - "80:80/tcp" # Default HTTPs Port. FTL will generate a self-signed certificate - "443:443/tcp" # Uncomment the line below if you are using Pi-hole as your DHCP server #- "67:67/udp" # Uncomment the line below if you are using Pi-hole as your NTP server #- "123:123/udp" environment: # Set the appropriate timezone for your location (https://en.wikipedia.org/wiki/List_of_tz_database_time_zones), e.g: TZ: 'Europe/London' # Set a password to access the web interface. Not setting one will result in a random password being assigned FTLCONF_webserver_api_password: 'correct horse battery staple' # If using Docker's default `bridge` network setting the dns listening mode should be set to 'all' FTLCONF_dns_listeningMode: 'all' # Volumes store your data between container upgrades volumes: # For persisting Pi-hole's databases and common configuration file - './etc-pihole:/etc/pihole' # Uncomment the below if you have custom dnsmasq config files that you want to persist. Not needed for most starting fresh with Pi-hole v6. If you're upgrading from v5 you and have used this directory before, you should keep it enabled for the first v6 container start to allow for a complete migration. It can be removed afterwards. Needs environment variable FTLCONF_misc_etc_dnsmasq_d: 'true' #- './etc-dnsmasq.d:/etc/dnsmasq.d' cap_add: # See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities # Required if you are using Pi-hole as your DHCP server, else not needed - NET_ADMIN # Required if you are using Pi-hole as your NTP client to be able to set the host's system time - SYS_TIME # Optional, if Pi-hole should get some more processing time - SYS_NICE restart: unless-stopped
#!/bin/bash BLOCKLIST_URL="https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" ZONE_DIR="/etc/bind/zones" ZONE_CONF="/etc/bind/named.conf.blocked" mkdir -p "$ZONE_DIR" echo "// Auto-generated zone definitions" > "$ZONE_CONF" # Domains extrahieren, Duplikate entfernen curl -s "$BLOCKLIST_URL" | grep "^0.0.0.0" | awk '{print $2}' | sort -u | while read domain; do # Erstelle pro Domain eine eigene Zone-Datei zone_file="$ZONE_DIR/db.${domain}" cat > "$zone_file" <<EOF \$TTL 86400 @ IN SOA localhost. root.localhost. ( 2 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 86400 ) ; Negative Cache TTL ; IN NS localhost. IN A 0.0.0.0 * IN A 0.0.0.0 EOF # Füge die Zone in die named.conf.blocked ein echo "zone \"$domain\" IN {" >> "$ZONE_CONF" echo " type master;" >> "$ZONE_CONF" echo " file \"$zone_file\";" >> "$ZONE_CONF" echo "};" >> "$ZONE_CONF" done