pi-hole/advanced/01-pihole.conf

# Pi-hole: A black hole for Internet advertisements
# (c) 2017 Pi-hole, LLC (https://pi-hole.net)
# Network-wide ad blocking via your own hardware.
#
# Dnsmasq config for Pi-hole's FTLDNS
#
# This file is copyright under the latest version of the EUPL.
# Please see LICENSE file for your rights under this license.

###############################################################################
#      FILE AUTOMATICALLY POPULATED BY PI-HOLE INSTALL/UPDATE PROCEDURE.      #
# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #
#                                                                             #
#        IF YOU WISH TO CHANGE THE UPSTREAM SERVERS, CHANGE THEM IN:          #
#                      /etc/pihole/setupVars.conf                             #
#                                                                             #
#        ANY OTHER CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE           #
#                    WITHIN /etc/dnsmasq.d/yourname.conf                      #
###############################################################################

addn-hosts=/etc/pihole/local.list

domain-needed

localise-queries

bogus-priv

no-resolv

server=@DNS1@
server=@DNS2@

interface=@INT@

cache-size=10000

log-queries
log-facility=/var/log/pihole.log

local-ttl=2

log-async

# Signal to Firefox that the local network is unsuitable for DNS-over-HTTPS
# This follows https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https
# (sourced 7th September 2019)
server=/use-application-dns.net/
Updated License 2016-01-30 20:12:40 +00:00			`# Pi-hole: A black hole for Internet advertisements`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# (c) 2017 Pi-hole, LLC (https://pi-hole.net)`
			`# Network-wide ad blocking via your own hardware.`
Updated License 2016-01-30 20:12:40 +00:00			`#`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# Dnsmasq config for Pi-hole's FTLDNS`
			`#`
			`# This file is copyright under the latest version of the EUPL.`
			`# Please see LICENSE file for your rights under this license.`
Updated License 2016-01-30 20:12:40 +00:00
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00			`###############################################################################`
			`# FILE AUTOMATICALLY POPULATED BY PI-HOLE INSTALL/UPDATE PROCEDURE. #`
			`# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #`
Add direction to change upstream servers in setupVars.conf 2016-10-18 09:34:05 +00:00			`# #`
			`# IF YOU WISH TO CHANGE THE UPSTREAM SERVERS, CHANGE THEM IN: #`
			`# /etc/pihole/setupVars.conf #`
			`# #`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# ANY OTHER CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE #`
			`# WITHIN /etc/dnsmasq.d/yourname.conf #`
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00			`###############################################################################`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Move local.list after the ad blocking lists Fixes the bug found by [Reddit](https://www.reddit.com/r/pihole/comments/6j3az9/urls_in_my_blacklist_are_showing_up_as_my_default/) 2017-06-25 16:18:09 +00:00			`addn-hosts=/etc/pihole/local.list`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`domain-needed`
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00
Add localise-queries flag to 01-pihole.conf 2017-04-30 11:47:07 +00:00			`localise-queries`

listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`bogus-priv`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`no-resolv`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Get ready for user selected DNSs Prep for using sed to insert user selected DNSs into 01-pihole.conf. Selections will come from dialog during install script containing the following choices: Google, DynDNS, and eventually 2 custom DNS servers. 2016-01-25 05:05:17 +00:00			`server=@DNS1@`
			`server=@DNS2@`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Revert #1273 2017-03-03 22:14:12 +00:00			`interface=@INT@`

listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`cache-size=10000`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Don't use extra query logging Signed-off-by: DL6ER <dl6er@dl6er.de> 2018-08-20 21:11:23 +00:00			`log-queries`
.log extension 2015-07-29 11:20:39 +00:00			`log-facility=/var/log/pihole.log`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Decrease `local-ttl` to 2 * Decreasing value should benefit clients when whitelisting blocked sites, [as per this discussion](https://github.com/pi-hole/pi-hole/pull/1698#issuecomment-331134576). 2017-09-21 13:11:44 +00:00			`local-ttl=2`
log-async For better performance. I have been using it for a few weeks with no adverse effects. 2015-12-05 20:14:34 +00:00
			`log-async`
Signal to Firefox that the local network is unsuitable for DNS-over-HTTPS Signed-off-by: DL6ER <dl6er@dl6er.de> 2019-09-07 06:44:03 +00:00
			`# Signal to Firefox that the local network is unsuitable for DNS-over-HTTPS`
			`# This follows https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https`
			`# (sourced 7th September 2019)`
			`server=/use-application-dns.net/`