Pihole / Direction To Go reddit / selfhosted ---------------------------------------------------------------------- usrdef · 2023-09-27 18:51 I recently installed Pihole after reading a lot of good things about it, and thus far I love it. In a perfect world, I'd be able to take my Android outside the house and still be able to access my Pihole. However, I've read a few docs that a VPN should be used when trying to do this, but on my desktop and android phone, I use OpenVPN because I have a server outside the house running an OpenVPN server that I connect to . Just looking to see if anyone can point me in the right direction for doing this without a complicated setup, where I can also continue to use OpenVPN for connecting to my server, and be able to make sure if Pihole when I go outside of my network. ---------------------------------------------------------------------- jusepal · 2023-09-27 20:12 I don't think pihole can act as dns over tls server by itself which you wanted if to connect via Android's private dns setting. Probably gotta pair it with something else like nginx to proxy pass the port 853 to pihole's port 53. I don't really have much experience with pihole. But what i used is either adguardhome or technitium, depends on situation. Adguardhome for fancy modern ui but less capable than technitium. Technitium for more technical fine tuned setting but with old-ish looking ui. Both can act as recursive dns over tls, dns over https or just plaintext port 53. ---------------------------------------------------------------------- aprx4 · 2023-09-27 20:33 I have wireguard server installed on my opnsense router which allow my devices to access resources on home network when i'm not home, DNS included. Wireguard has very good official apps on every major platform. My iphone and Macbook automatically connect to network at home when they're not using home wifi SSID. Tailscale is based on Wireguard protocol but management is much easier, that should be your best option. ---------------------------------------------------------------------- Spuxilet · 2023-09-27 22:24 I use wg-easy for that. Setting up wireguard server and generating client is easier with it then opening text document :D Just route all your traffic through tunnel and have pihole setup where you have wg- easy. Also wireguard is much faster then openvpn. I stopped using openvpn multiple years ago, switched to wireguard and never looked anywhere else. It's integrated in linux kernel thus in android too. ---------------------------------------------------------------------- maximusprimate · 2023-09-27 23:02 Tailscale. ---------------------------------------------------------------------- usrdef · 2023-09-27 23:03 I've been debating on switching to wireguard. I just remember the pain I had with setting OpenVPN up, and I would hate to repeat that experience again. Currently with OpenVPN I get my full bandwidth, so I haven't had any major reasons to switch yet. I wanted to setup PAM / Yubikey authentication, but OpenVPN seems to be very touchy, and if you tweak one stupid setting, the entire system has a stroke. I'll take a look at wg-easy. I've spent the last 5 hours destroying Google to find guides and any docs I can find that will explain things so I have a firm grasp on what I'm doing. ---------------------------------------------------------------------- usrdef · 2023-09-27 23:06 Yeah that's my issue, I don't have a lot of experience with Pihole yet. I've dealt with it for maybe 12 hours, and I'm trying to wrap my head around things like * If I were to setup a VPN to access Pihole, I'd want the admin interface to ONLY be accessible via HTTPS and via a domain I can control. I don't want the IP to lead to the pihole admin website. * Trying to secure the software itself * Figuring out the relationship between Pihole, Nginx / lighthttp Right now I feel like my brain is being squeezed from my head. ---------------------------------------------------------------------- sdR-h0m13 · 2023-09-28 05:43 Search for PiVPN website. 1 line of code to copy and follow the script instructions. I have it installed on my Debian PC "server". Really e-z. ---------------------------------------------------------------------- usrdef · 2023-09-28 05:48 Glad there's something easy about this. I've been working on Pihole all day and every minute makes me more confused. Because at present, it "appears" that Pihole is working, however, in the list of network devices, it appears that I can only see the root pi computer, not any other computer attempting to connect. So I'm trying to figure out what the hell I'm doing wrong lol