From 022fb3baa887243017cabbb25f295344a9a6aa23 Mon Sep 17 00:00:00 2001
From: Mark Hoekveen <mark@hoekveen.net>
Date: Tue, 4 Feb 2025 00:07:43 +0100
Subject: [PATCH] pihole

---
 playbook.yml                       |  6 ++++++
 tasks/pihole.yml                   | 18 ++++++++++++++++++
 tasks/pihole/docker-compose.yml.j2 | 17 +++++++++++++++++
 tasks/pihole/vault.yml             |  6 ++++++
 4 files changed, 47 insertions(+)
 create mode 100644 tasks/pihole.yml
 create mode 100644 tasks/pihole/docker-compose.yml.j2
 create mode 100644 tasks/pihole/vault.yml

diff --git a/playbook.yml b/playbook.yml
index 89c53ca..2e7a13b 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -90,3 +90,9 @@
   remote_user: nerevar
   tasks:
     - import_tasks: tasks/vcmp_timer.yml
+- name: Vaermina install
+  hosts: vaermina
+  become: true
+  remote_user: nerevar
+  tasks:
+    - import_tasks: tasks/pihole.yml
diff --git a/tasks/pihole.yml b/tasks/pihole.yml
new file mode 100644
index 0000000..4d23b1a
--- /dev/null
+++ b/tasks/pihole.yml
@@ -0,0 +1,18 @@
+- name: Pi-hole
+  include_vars:
+    file: pihole/vault.yml
+- name: Create /opt/pihole directory
+  file:
+    path: "/opt/pihole"
+    state: directory
+    owner: root
+    group: aurbis
+    mode: "0755"
+- name: Copy docker-compose file
+  template:
+    src: pihole/docker-compose.yml.j2
+    dest: /opt/pihole/docker-compose.yml
+    group: aurbis
+- name: Go go gadget pihole
+  community.docker.docker_compose_v2:
+    project_src: /opt/pihole
diff --git a/tasks/pihole/docker-compose.yml.j2 b/tasks/pihole/docker-compose.yml.j2
new file mode 100644
index 0000000..3a597e5
--- /dev/null
+++ b/tasks/pihole/docker-compose.yml.j2
@@ -0,0 +1,17 @@
+# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
+services:
+  pihole:
+    container_name: pihole
+    image: pihole/pihole:latest
+    ports:
+      - "53:53/tcp"
+      - "53:53/udp"
+      - "80:80/tcp"
+    environment:
+      TZ: "Europe/Amsterdam"
+      WEBPASSWORD: "{{ pihole_password }}"
+      WEBTHEME: "default-dark"
+    volumes:
+      - "./etc-pihole:/etc/pihole"
+      - "./etc-dnsmasq.d:/etc/dnsmasq.d"
+    restart: unless-stopped
diff --git a/tasks/pihole/vault.yml b/tasks/pihole/vault.yml
new file mode 100644
index 0000000..0043298
--- /dev/null
+++ b/tasks/pihole/vault.yml
@@ -0,0 +1,6 @@
+$ANSIBLE_VAULT;1.1;AES256
+39636161643531383438646638376437613630663932623366366132346662303266313834643835
+3537373030666638313833623765336335386135363036610a316231333431666639316139663738
+31336539366161323162373736626534323432333663363534336565353763653363353365396266
+3935663537303165640a393334306565383730663934653536393839313437313330623438636564
+63363234336365616639613236336233333739383264383762343462316564316434