mirror of https://github.com/tteck/Proxmox.git
Add Unbound support for Pi-hole installation
This commit is contained in:
Bram Suurd
parent
366e8bddef
commit
ca5834f207
|
|
@ -1,71 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
source <(curl -s https://raw.githubusercontent.com/tteck/Proxmox/main/misc/build.func)
|
||||
# Copyright (c) 2021-2024 tteck
|
||||
# Author: tteck (tteckster)
|
||||
# License: MIT
|
||||
# https://github.com/tteck/Proxmox/raw/main/LICENSE
|
||||
|
||||
function header_info {
|
||||
clear
|
||||
cat <<"EOF"
|
||||
____ ______ ______ __ ______ __ ___ ______ ____ __ ___ ______
|
||||
/ __ \/ _/ / / / __ \/ / / ____/ __ / / / / | / / __ )/ __ \/ / / / | / / __ \
|
||||
/ /_/ // // /_/ / / / / / / __/ __/ /_ / / / / |/ / __ / / / / / / / |/ / / / /
|
||||
/ ____// // __ / /_/ / /___/ /___ /_ __/ / /_/ / /| / /_/ / /_/ / /_/ / /| / /_/ /
|
||||
/_/ /___/_/ /_/\____/_____/_____/ /_/ \____/_/ |_/_____/\____/\____/_/ |_/_____/
|
||||
|
||||
EOF
|
||||
}
|
||||
header_info
|
||||
echo -e "Loading..."
|
||||
APP="pihole-unbound"
|
||||
var_disk="2"
|
||||
var_cpu="1"
|
||||
var_ram="512"
|
||||
var_os="debian"
|
||||
var_version="12"
|
||||
variables
|
||||
color
|
||||
catch_errors
|
||||
|
||||
function default_settings() {
|
||||
CT_TYPE="1"
|
||||
PW=""
|
||||
CT_ID=$NEXTID
|
||||
HN=$NSAPP
|
||||
DISK_SIZE="$var_disk"
|
||||
CORE_COUNT="$var_cpu"
|
||||
RAM_SIZE="$var_ram"
|
||||
BRG="vmbr0"
|
||||
NET="dhcp"
|
||||
GATE=""
|
||||
APT_CACHER=""
|
||||
APT_CACHER_IP=""
|
||||
DISABLEIP6="no"
|
||||
MTU=""
|
||||
SD=""
|
||||
NS=""
|
||||
MAC=""
|
||||
VLAN=""
|
||||
SSH="no"
|
||||
VERB="no"
|
||||
echo_default
|
||||
}
|
||||
|
||||
function update_script() {
|
||||
header_info
|
||||
if [[ ! -d /etc/pihole ]]; then msg_error "No ${APP} Installation Found!"; exit; fi
|
||||
msg_info "Updating ${APP} LXC"
|
||||
apt-get update &>/dev/null
|
||||
apt-get -y upgrade &>/dev/null
|
||||
msg_ok "Updated Successfully"
|
||||
exit
|
||||
}
|
||||
|
||||
start
|
||||
build_container
|
||||
description
|
||||
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${APP} should be reachable by going to the following URL.
|
||||
${BL}http://${IP}/admin${CL} \n"
|
||||
|
|
@ -21,6 +21,41 @@ $STD apt-get install -y ufw
|
|||
$STD apt-get install -y ntp
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
read -r -p "Would you like to add Unbound? <y/N> " prompt
|
||||
if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
|
||||
msg_info "Installing Unbound"
|
||||
$STD apt-get install -y unbound
|
||||
cat <<EOF >/etc/unbound/unbound.conf.d/pi-hole.conf
|
||||
server:
|
||||
verbosity: 0
|
||||
interface: 0.0.0.0
|
||||
port: 5335
|
||||
do-ip4: yes
|
||||
do-udp: yes
|
||||
do-tcp: yes
|
||||
do-ip6: no
|
||||
prefer-ip6: no
|
||||
harden-glue: yes
|
||||
harden-dnssec-stripped: yes
|
||||
use-caps-for-id: no
|
||||
edns-buffer-size: 1232
|
||||
prefetch: yes
|
||||
num-threads: 1
|
||||
private-address: 192.168.0.0/24
|
||||
private-address: 169.254.0.0/16
|
||||
private-address: 172.16.0.0/12
|
||||
private-address: 10.0.0.0/8
|
||||
private-address: fd00::/8
|
||||
private-address: fe80::/10
|
||||
EOF
|
||||
cat <<EOF >/etc/dnsmasq.d/99-edns.conf
|
||||
edns-packet-max=1232
|
||||
EOF
|
||||
wget -q https://www.internic.net/domain/named.root >/var/lib/unbound/root.hints
|
||||
systemctl enable -q --now unbound
|
||||
msg_ok "Installed Unbound"
|
||||
fi
|
||||
|
||||
msg_info "Installing Pi-hole"
|
||||
mkdir -p /etc/pihole/
|
||||
cat <<EOF >/etc/pihole/setupVars.conf
|
||||
|
|
|
|||
|
|
@ -1,87 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
|
||||
# Copyright (c) 2021-2024 tteck
|
||||
# Author: tteck (tteckster)
|
||||
# License: MIT
|
||||
# https://github.com/tteck/Proxmox/raw/main/LICENSE
|
||||
|
||||
source /dev/stdin <<< "$FUNCTIONS_FILE_PATH"
|
||||
color
|
||||
verb_ip6
|
||||
catch_errors
|
||||
setting_up_container
|
||||
network_check
|
||||
update_os
|
||||
|
||||
msg_info "Installing Dependencies"
|
||||
$STD apt-get install -y curl
|
||||
$STD apt-get install -y sudo
|
||||
$STD apt-get install -y mc
|
||||
$STD apt-get install -y ufw
|
||||
$STD apt-get install -y ntp
|
||||
$STD apt-get install -y unbound
|
||||
|
||||
msg_ok "Installed Dependencies"
|
||||
|
||||
msg_info "Configuring Unbound"
|
||||
cat <<EOF >/etc/unbound/unbound.conf.d/pi-hole.conf
|
||||
server:
|
||||
verbosity: 0
|
||||
interface: 127.0.0.1
|
||||
port: 5335
|
||||
do-ip4: yes
|
||||
do-udp: yes
|
||||
do-tcp: yes
|
||||
do-ip6: no
|
||||
prefer-ip6: no
|
||||
harden-glue: yes
|
||||
harden-dnssec-stripped: yes
|
||||
use-caps-for-id: no
|
||||
edns-buffer-size: 1232
|
||||
prefetch: yes
|
||||
num-threads: 1
|
||||
private-address: 192.168.0.0/16
|
||||
private-address: 169.254.0.0/16
|
||||
private-address: 172.16.0.0/12
|
||||
private-address: 10.0.0.0/8
|
||||
private-address: fd00::/8
|
||||
private-address: fe80::/10
|
||||
EOF
|
||||
|
||||
cat <<EOF >/etc/dnsmasq.d/99-edns.conf
|
||||
edns-packet-max=1232
|
||||
EOF
|
||||
|
||||
wget https://www.internic.net/domain/named.root -qO- | sudo tee /var/lib/unbound/root.hints
|
||||
|
||||
$STD systemctl enable unbound
|
||||
$STD systemctl start unbound
|
||||
msg_ok "Configured Unbound"
|
||||
|
||||
msg_info "Installing Pi-hole"
|
||||
mkdir -p /etc/pihole/
|
||||
cat <<EOF >/etc/pihole/setupVars.conf
|
||||
PIHOLE_INTERFACE=eth0
|
||||
PIHOLE_DNS_1=localhost:5335
|
||||
QUERY_LOGGING=true
|
||||
INSTALL_WEB_SERVER=true
|
||||
INSTALL_WEB_INTERFACE=true
|
||||
LIGHTTPD_ENABLED=true
|
||||
CACHE_SIZE=10000
|
||||
DNS_FQDN_REQUIRED=true
|
||||
DNS_BOGUS_PRIV=true
|
||||
DNSMASQ_LISTENING=local
|
||||
WEBPASSWORD=$(openssl rand -base64 48)
|
||||
BLOCKING_ENABLED=true
|
||||
EOF
|
||||
# View script https://install.pi-hole.net
|
||||
$STD bash <(curl -fsSL https://install.pi-hole.net) --unattended
|
||||
msg_ok "Installed Pi-hole"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
|
||||
msg_info "Cleaning up"
|
||||
$STD apt-get autoremove
|
||||
$STD apt-get autoclean
|
||||
msg_ok "Cleaned"
|
||||
Loading…
Reference in New Issue