Pi-hole provides LAN DNS service and the household DNS administration interface. It is one of the most sensitive edge services on the host because it binds port 53 directly on the machine.
This page documents the pihole service. Broader DNS and firewall assumptions live on DNS and Firewall.
piholepihole/pihole:latest/opt/stacks/house/compose.yamlhouse_defaultunless-stoppedpihole.better-than.tv127.0.0.1, 8.8.8.8/srv/docker/pihole/config/srv/docker/pihole/dnsmasq.d/srv/docker/pihole/config/gravity.db53/tcp53/udphttp://192.168.0.113:8088https://pihole.better-than.tv2026-04-07, WEBPASSWORD is still inline in /opt/stacks/house/compose.yaml.env file to match Smithflix policy/srv/docker/pihole/config53/tcp and 53/udp before debugging client-side resolver issues:8088 or pihole.better-than.tv for list, DHCP, and query-log workflows53 exposure as a documentation eventjson-file2026-04-07docker logs pihole shows gravity runs, list fetch failures, and startup warnings/srv/docker/pihole is inside the documented Duplicati scope because it lives under /srv/docker/srv/docker/pihole/config and /srv/docker/pihole/dnsmasq.d together53 conflicts on the host will break Pi-hole startup or listener availability53 to WAN is a priority security incident2026-04-07