Pi-hole LXC (CT 101)¶
DNS server. Runs Pi-hole and Unbound directly in the LXC (no Docker).
Specs¶
| Setting | Value |
|---|---|
| CT ID | 101 |
| Hostname | pihole |
| Template | Debian 13 standard |
| rootfs | 4GB |
| RAM | 1024MB |
| Cores | 4 |
| CPU units | 2048 |
| IP | 192.168.50.101 |
| onboot | yes |
| Unprivileged | yes |
| Features | nesting=1 |
Bind Mounts¶
None - Pi-hole and Unbound store config in rootfs (/etc/pihole/, /etc/unbound/). Small and easily recreatable.
idmap¶
Not required - Pi-hole and Unbound run as root/service users within the LXC.
Komodo¶
Binary Periphery agent only (no Docker stacks on this LXC).
| Setting | Value |
|---|---|
| Server | pihole |
| Address | wss://192.168.50.101:8120 |
Tailscale¶
DNS server for all Tailscale clients.
| Setting | Value |
|---|---|
| Tailscale IP | |
| Flags | --accept-routes=false --accept-dns=false |
TUN device entry in /etc/pve/lxc/101.conf:
See tailscale.
Services¶
→ pihole - Pi-hole, Unbound