

I’ve been running two piholes for a few years:
I let the router handle dhcp, while having it hand out each of the piholes IPs as DNS #1 and DNS #2. Those piholes settings are mirrored using Nebula-Sync, so any change made to one pihole gets copied over to the other automatically.
Both of those piholes are setup to wrap outbound DNS reqests in DOH as well, with the router blocking port 53 outbound. So all DNS traffic leaving the network has to be DOH/DOT or it just gets dropped. Currently using NextDNS and quad9 as my upstream DOH providers.
Note: the cloudflared method for DOH is outdated. I’m still using it via the docker image “image: cloudflare/cloudflared:2025.11.1”
I believe This (dns-crypt) is the more recent method.












Seriously; fuck the people that just abandon their vehicles in emergency lanes with the hazard lights on.
“I’ll only be a minute” Fuck you, you’ll be more than a minute, your shit is in the way, and that ‘minute’ could and has literally been the difference between life and death in an actual emergency.
I hope your shit gets towed and you face a huge fine. Or a fire fighter smashes it up to get to a fire hydrant.