infra/roles/pihole/templates/pihole-FTL.conf.j2

38 lines
956 B
Django/Jinja

PIHOLE_PTR=HOSTNAME
BLOCKINGMODE=NULL
RATE_LIMIT=0/0
BLOCK_ESNI=true
# reply with NXDOMAIN to queries of use-application-dns.net
# default value: true
MOZILLA_CANARY=true
# reply with NXDOMAIN to mask.icloud.com and mask-h2.icloud.com to
# disable apples icloud private relay to prevent apps devices from
# bypassing pihole
# default value: true
BLOCK_ICLOUD_PR=true
# when the gravity database is locked/busy, allow all queries
REPLY_WHEN_BUSY=ALLOW
LOGFILE=/var/log/pihole/pihole-FTL.log
RESOLVE_IPV6=yes
RESOLVE_IPV4=yes
# disables pihole trying to override the PTR record
PIHOLE_PTR=NONE
{% if inventory_hostname in wg_clients %}
#LOCAL_IPV4={{ wg_clients[inventory_hostname]['ip'] }}
#REPLY_ADDR4={{ wg_clients[inventory_hostname]['ip'] }}
{% else %}
#LOCAL_IPV4={{ ansible_default_ipv4.address }}
#REPLY_ADDR4= {{ wg_clients[inventory_hostname]['ip'] }}
{% endif %}
# the default is needed to pihole leaves the file alone
LOCAL_IPV4=0.0.0.0