docs: record full Pi-hole retirement
Some checks failed
secret-guardrails / artifact-secret-scan (push) Has been cancelled
secret-guardrails / gitleaks (push) Has been cancelled

This commit is contained in:
Fizzlepoof
2026-05-27 21:14:15 +00:00
parent 2ab4ff4428
commit 24c6a29273
9 changed files with 34 additions and 29 deletions

View File

@@ -1,11 +1,13 @@
# PD Pi-hole / Unbound / Keepalived Stack
Primary-node stack for the Pi-hole HA plan.
Historical primary-node stack for the retired Pi-hole HA plan.
- **Repo stack path:** `/home/fizzlepoof/repos/truenas-stacks/pihole`
- **Live PD stack path:** `/mnt/docker-ssd/docker/compose/pihole`
- **Node role:** PD primary / MASTER
- **VIP target:** `10.5.30.53/24`
- **Former live PD stack path:** `/mnt/docker-ssd/docker/compose/pihole`
- **Former node role:** PD primary / MASTER
- **Former VIP target:** `10.5.30.53/24`
Status: retired on 2026-05-27 after cutover to the Technitium trio (`10.5.30.8`, `10.5.30.9`, `10.5.30.10`).
This stack intentionally covers the **PD primary** plus PD-hosted sync:
- Pi-hole
@@ -13,7 +15,7 @@ This stack intentionally covers the **PD primary** plus PD-hosted sync:
- Keepalived
- Nebula Sync
NOMAD replica deployment is now documented and live; only the RPi4 replica remains future work.
NOMAD replica deployment is documented here for historical reference; only the RPi4 replica remains optional future work if you ever revive a separate backup-DNS design.
## Files
@@ -39,7 +41,7 @@ If that validates cleanly, bring it up:
/usr/bin/bash bin/prepare_pd.sh --up
```
## Current live topology
## Retired topology snapshot
- **PD primary**
- service root: `/mnt/docker-ssd/docker/compose/pihole`
@@ -59,6 +61,7 @@ If that validates cleanly, bring it up:
## Important notes
- This stack is no longer live. Keep it only as a historical build/repair reference.
- `KEEPALIVED_PASSWORD` must be **8 chars or fewer** because VRRP PASS auth is annoying and old.
- Verify `LAN_INTERFACE` on PD before deployment (`ip link show`).
- `FTLCONF_dns_listeningMode=LOCAL` is set because TrueNAS binds loopback on port 53.