22
Beyond Pi-Hole (lemmy.zip)
submitted 4 months ago by gblues@lemmy.zip to c/selfhosted@lemmy.world

I've been using pi-hole for the last 3 or 4 years and I'm pretty satisfied with it. Now I'm thinking about the next step. Nowadays I have my local network and a tailscale to access my hosts. I'm thinking about a DNS solutions to solve the names on the locla network and thru tailscale simultanely, while been able to block ads on DNS like pi-hole do. What do you think would be a better solution for this next step? I've only used bind before, but I think and old dog can learn a new trick.

top 13 comments
sorted by: hot top controversial new old
[-] frongt@lemmy.zip 6 points 4 months ago

Bind is reliable. It's a good choice.

I'd still keep the pihole, though. You can use one as the upstream for the other. Or, configure the pihole to use your local DNS server only for your local domain name.

[-] reoccupy4753@lemmy.dbzer0.com 5 points 4 months ago

I’ve been using technitium dns server for this. It is an all in one solution and is working well for me through tailscale as a global name server.

[-] Funky_Beak@lemmy.sdf.org 5 points 4 months ago* (last edited 4 months ago)

I have been experimenting with this recently. I just have tailscale pointing to adguard on a vm i use as an exit node and run nginx to handle the reverse proxy.

[-] stratself@lemdro.id 3 points 4 months ago

You should add your DNS forwarder as its own node in Tailscale, and configure the tailnet to resolve DNS through it. That way you'll be able to resolve both MagicDNS node names and your local domains, as well as being blocklist-enabled. Besides, I think you can also define custom A/AAAA records on your Tailscale console, skipping local records on Pi-hole altogether.

I'd also recommend Technitium for a new DNS solution, mainly because they're going to add support for clustering soon. This could be highly useful if you want to configure blocklists once and sync them between different Technitium nodes. Should it works out, I'm thinking of installing it alongside every Tailscale exit node, for the benefit of synced blocklists, local domains, and exit-node geolocated IPs for external domains.

[-] rtxn@lemmy.world 2 points 4 months ago* (last edited 4 months ago)

Local Unbound with Tailscale's split DNS has been solid for me. I use it as an OPNsense service with the web GUI, but the standalone YAML config looks simple enough.

[-] kata1yst@sh.itjust.works 1 points 4 months ago
[-] QuizzaciousOtter@lemmy.dbzer0.com 1 points 4 months ago

I second this. Very light, feature-rich, configurable and works flawlessly. I use it for ad blocking, proxying all DNS requests to DoT upstreams, and local addresses in LAN and over Wireguard.

[-] mhzawadi@lemmy.horwood.cloud 1 points 4 months ago

Did you know you can use pihole as a full DNS server to serve A and cname records?

I have my public DNS at OVH and internal stuff in pihole, split view DNS is amazing.

[-] madcaesar@lemmy.world 0 points 4 months ago

Could you elaborate on this?

[-] mhzawadi@lemmy.horwood.cloud 1 points 4 months ago

So pihole is a full DNS server, so you can add your own DNS records. You don't need to run bind.

https://discourse.pi-hole.net/t/local-dns-records/74898

By have some domains in pihole, I access services over vpn or on the local network

[-] q7mJI7tk1@lemmy.world 0 points 4 months ago* (last edited 4 months ago)

I've had pihole running in the past, then Adguard, but moved to NextDNS several years ago and have been happy with it. For a small fee, it removes all need for self hosting your own. I set up profiles for the kids, wife etc, then set the DNS in their phones, tablets, so I know its always working wherever they are. You can set local IPs in it if you want, but I use a reverse proxy for all LAN requests instead.

Only slight issue I've had with it was recently making several quick changes to DNS in Cloudflare, and NextDNS took several hours to propagate which was a PITA at the time.

Edit: I've just seen that they now offer a free tier which they didn't in the past.

[-] StopSpazzing@lemmy.world 2 points 4 months ago

And how do you fix the problem with applications that have hard coded dns?

[-] q7mJI7tk1@lemmy.world 2 points 4 months ago

If you're referring to network based DNS, I use their script to have it on my Ubiquiti router as well. I have that with its own profile with full blocking for iot etc.

I had PiHole with unbound on my OPNsense way back when, but the internet just needs to work for both me and my family and not go offline with me tinkering with the homelab. NextDNS takes all of that hassle out of the equation.

this post was submitted on 11 Oct 2025
22 points (100.0% liked)

Selfhosted

57010 readers
34 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS