fizzlepoof/truenas-stacks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Nebula Sync to PD Pi-hole stack

Browse Source
This commit is contained in:
Fizzlepoof
2026-05-15 15:11:50 +00:00
parent c7baa0054f
commit 66dda26f98
3 changed files with 26 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pihole/README.md
View File

@@ -7,10 +7,11 @@ Primary-node stack for the Pi-hole HA plan.
- **Node role:** PD primary / MASTER
- **VIP target:** `10.5.1.53/24`
This stack intentionally covers the **PD primary** only:
This stack intentionally covers the **PD primary** plus PD-hosted sync:
- Pi-hole
- Unbound
- Keepalived
- Nebula Sync
Serenity and RPi4 replicas still need their own deployment steps.
@@ -43,5 +44,6 @@ If that validates cleanly, bring it up:
- `KEEPALIVED_PASSWORD` must be **8 chars or fewer** because VRRP PASS auth is annoying and old.
- Verify `LAN_INTERFACE` on PD before deployment (`ip link show`).
- `FTLCONF_dns_listeningMode=LOCAL` is set because TrueNAS binds loopback on port 53.
- This stack does **not** include Nebula Sync yet. Add that after Serenity/RPi replicas are live.
- Pi-hole NTP is explicitly disabled here because PD host `chronyd` already owns UDP 123.
- Nebula Sync runs on PD and uses `NEBULA_SYNC_PRIMARY` / `NEBULA_SYNC_REPLICAS` from `.env`.
- `keepalived.conf` is generated and should stay local/untracked.