Howdy Everyone!

As I am setting up my infrastructure at home using docker I wanted to ask, is it better to have DNS, something like pi-hole, on my main docker swarm or would it be better to have it on a dedicated machine/docker host separate from the rest of my infrastructure?

Thanks for the input!

  • @Darkassassin07@lemmy.caEnglish
    11•9 months ago

    Why not both?

    My primary DNS is pihole on a rpi dedicated to the task; but I run a second instance of pihole via my main docker stack for redundancy. Should one or the other be unavailable, there’s a second one to pick up the slack.

    I just provide both DNS IPs to LAN clients via DHCP.

    Gravity Sync is a great tool to keep both piholes settings/records/lists in sync.

    • @Sandbag@lemm.eeOPEnglish
      2•9 months ago

      Gravity sync looks cool but it looks like it was depreciated, any alternatives for it?

      • @Darkassassin07@lemmy.caEnglish
        2•9 months ago

        Oh damn, I hadn’t noticed. My setup is still functioning just fine.

        There is an alternative though: Orbital-Sync

        I haven’t actually used it, so I can’t say much about it; but I’ll probably look into replacing gravity-sync with that.

  • PaxEnglish
    2•9 months ago

    I would suggest 2 pi-hole + unbound stacks on different hardware, preferably on different switches. That way you can restart/fiddle with things without your family going crazy about “internet not working”.

  • @tfw_no_toiletpaper@lemmy.worldEnglish
    1•9 months ago

    While we’re at the topic, which DNS do you guys usually use as upstream? On my router I think I set quad9 and cloudflare over TLS but sometimes I notice on new websites I need to refresh a couple of times until it works, might be DNS. Was too lazy to look into it since gaming and apps work without issues.

  • @NeoNachtwaechter@lemmy.worldEnglish
    1•9 months ago

    I have 3 separate machines:

    1. That fat home server with NAS and VM’s etc.

    2. A Pi serving my smart home.

    3. A plastic router with OpenWrt doing DNS and (I like to believe) some security, and giving WiFi to many small devices.

    They all run 24/7 but I just don’t want everything to be dead and dark when one machine is down for whatever reason.

  • ShimitarEnglish
    0•9 months ago

    I have a quite rich selfhosted stack, and DNS is indeed part of it.

    For such a critical piece of infrastructure I didn’t needed a container, just installed Unbound and did some setup for ad blocking and internal DNS rules.

    Here my setup: https://wiki.gardiol.org/doku.php?id=router:dhcp-dns

    You could go with an independent pihole maybe, but that would double the chances of a hardware failure…

    Using one device for everything might seem risky, but actually has less chances of failure ;)