Hey there, im looking into setting up a DNS Server in my Homelab, i would like something like this:
- Server in Docker on my Proxmox Server
- Server in Docker on my NAS and
- Server in my “Cloud” Network
Do you guys have any recommendations on how i could accomplish this? Otherwise i will just use PiHole with sync again or something like it :)
Two Pi-Hole docker container on two different servers. OpnSense DNS Plugin. Fallback, NextDNS Alternative, AdGuard is also a good DNS.
I’m using leng in an dedicated LXC container in Proxmox
https://github.com/cottand/leng
I’m using defaults + some local dns lookups. Works fine for my use, and lighter than pihole. No web ui
I have a philosophy of sticking close to reference implementations and upstream in the homelab because it forces me to learn principles rather than implementations. I use bind9, but that upstreams to pihole on a different port. It is hard to configure for sure, editing zone files in vi, but I learn a lot analyzing the reference syntax to understand features. I also use isc-dhcp-server for DHCP, again manually populating dhcpd.conf.
Bind can peer with other instances; right now it is it’s own ipam vm on my proxmox with bind/isc-dhcp/pihole docker, but I’m looking at dropping some hardware at a family member’s for a site 2.
Two PiHole servers. One is hosted via docker on my primary file server and the other is hosted in a Hyper-V VM on my sole windows box. The VM one is also my DHCP server.
Unbound on my OPNsense firewall. I don’t have advice for you, do you have some specific goals besides just having a DNS?
Look at reverse proxy instead. While you can do what you’re after with DNS, a bunch of the reverse proxy systems will automatically deal with SSL certificate, and there are even a couple that eliminate essentially all configuration outside of your docker file. Like, add a new docker and it automatically configures appName.domain.tld with SSL assigned. And if you ever decide to expose that address to the Internet, reverse proxy makes that simple and provides some security options as well.
I use Caddy for my reverse proxy running from my OPNsense firewall, but if you want the automation with docker there are better options.