pihole

playbook.yml

@@ -90,3 +90,9 @@
   remote_user: nerevar
   tasks:
     - import_tasks: tasks/vcmp_timer.yml
+- name: Vaermina install
+  hosts: vaermina
+  become: true
+  remote_user: nerevar
+  tasks:
+    - import_tasks: tasks/pihole.yml

tasks/pihole.yml

@@ -0,0 +1,18 @@
+- name: Pi-hole
+  include_vars:
+    file: pihole/vault.yml
+- name: Create /opt/pihole directory
+  file:
+    path: "/opt/pihole"
+    state: directory
+    owner: root
+    group: aurbis
+    mode: "0755"
+- name: Copy docker-compose file
+  template:
+    src: pihole/docker-compose.yml.j2
+    dest: /opt/pihole/docker-compose.yml
+    group: aurbis
+- name: Go go gadget pihole
+  community.docker.docker_compose_v2:
+    project_src: /opt/pihole

tasks/pihole/docker-compose.yml.j2

@@ -0,0 +1,17 @@
+# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
+services:
+  pihole:
+    container_name: pihole
+    image: pihole/pihole:latest
+    ports:
+      - "53:53/tcp"
+      - "53:53/udp"
+      - "80:80/tcp"
+    environment:
+      TZ: "Europe/Amsterdam"
+      WEBPASSWORD: "{{ pihole_password }}"
+      WEBTHEME: "default-dark"
+    volumes:
+      - "./etc-pihole:/etc/pihole"
+      - "./etc-dnsmasq.d:/etc/dnsmasq.d"
+    restart: unless-stopped

tasks/pihole/vault.yml

@@ -0,0 +1,6 @@
+$ANSIBLE_VAULT;1.1;AES256
+39636161643531383438646638376437613630663932623366366132346662303266313834643835
+3537373030666638313833623765336335386135363036610a316231333431666639316139663738
+31336539366161323162373736626534323432333663363534336565353763653363353365396266
+3935663537303165640a393334306565383730663934653536393839313437313330623438636564
+63363234336365616639613236336233333739383264383762343462316564316434