Scaffold PD Pi-hole primary stack

docs/planning/DEPLOY_PIHOLE.md

@@ -1,6 +1,6 @@
 # Pi-hole Deployment Plan
 
-**Status:** Pending  
+**Status:** PD primary stack scaffolded repo-side at `pihole/`; live 3-node rollout still pending replica details and PD-side deployment verification  
 **Architecture:** 3-node HA cluster with Keepalived VIP, Unbound recursive DNS, Nebula Sync
 
 ---
@@ -108,7 +108,8 @@ mkdir -p /path/to/appdata/unbound/var
 
 ## Node 1: PlausibleDeniability (MASTER)
 
-**Stack dir:** `/mnt/docker-ssd/docker/compose/pihole/`  
+**Repo stack dir:** `/home/fizzlepoof/repos/truenas-stacks/pihole/`  
+**Live stack dir:** `/mnt/docker-ssd/docker/compose/pihole/`  
 **Web UI port:** `8953`
 
 ### Pre-Deploy
@@ -210,14 +211,16 @@ LAN_INTERFACE=eno1
 
 ### Deploy
 
+Preferred PD-first flow now that the repo-side stack exists:
+
 ```bash
 cd /mnt/docker-ssd/docker/compose/pihole
-# Copy unbound.conf to appdata
-sudo cp unbound.conf /mnt/tank/docker/appdata/unbound-primary/
-sudo docker compose --env-file .env config
-sudo docker compose --env-file .env up -d
-sudo docker logs pihole --tail 20
-sudo docker logs unbound --tail 20
+cp .env.example .env
+nano .env
+/usr/bin/bash bin/prepare_pd.sh
+/usr/bin/bash bin/prepare_pd.sh --up
+sudo docker logs pihole-primary --tail 20
+sudo docker logs unbound-pihole-primary --tail 20
 ```
 
 ---

docs/planning/TODO.md

@@ -6,6 +6,7 @@
 
 ## Infrastructure
 - [ ] Deploy Pi-hole 3-node HA cluster (PD + Serenity + RPi4) — see docs/planning/DEPLOY_PIHOLE.md
+  - PD primary stack scaffolded repo-side under `pihole/` on 2026-05-15
   - RPi4 IP still TBD — fill in before deploying
 - [x] Deploy Kima-Hub — completed 2026-05-06; docs/planning/DEPLOY_KIMA_HUB.md now serves as deployment/repair reference
 - [ ] Set up off-site backup for vital data (appdata, databases, config repo, photos)