chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-23 10:13:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(pihole): use Pi-hole 6 dns.hosts for knoe.dev records

Browse Source 
Pi-hole 6 uses pihole-FTL --config dns.hosts as the authoritative local DNS
store. dnsmasq address= directives still work for new domains (e.g. mcp.0.knoe.dev)
but Pi-hole may serve stale upstream cache over them for previously-resolved
domains (e.g. auth.0.knoe.dev was cached from old DNS before the fix).

dns.hosts entries always win, idempotent approach: strip old *.0.knoe.dev entries,
append new ones, update via pihole-FTL --config + pihole reloaddns.

auth.0.knoe.dev: 34.120.221.5 (wrong) → 34.36.71.141 (knoe-auth GCE LB) ✓

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chrisfu 2026-06-02 15:00:40 -07:00
parent 3877cbfd38
commit 26790b8ced
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
infrastructure/roles/pihole_dns/tasks/main.yml
View File

@ -23,7 +23,7 @@
mode: "0644"
notify: restart pihole-FTL
- name: Configure knoe.dev GKE service records (LAN split-horizon)
- name: Configure knoe.dev GKE service records (dnsmasq fallback)
ansible.builtin.template:
src: 06-knoe-dev.conf.j2
dest: /etc/dnsmasq.d/06-knoe-dev.conf
@ -32,6 +32,21 @@
mode: "0644"
notify: restart pihole-FTL
- name: Register knoe.dev GKE records in Pi-hole 6 dns.hosts (native override)
# Pi-hole 6 uses pihole-FTL's internal dns.hosts for local records.
# dnsmasq address= directives work for some domains but Pi-hole 6 may
# serve cached upstream answers over them; dns.hosts always wins.
ansible.builtin.shell: |
# Build the hosts array: preserve existing non-knoe entries + add ours
CURRENT=$(pihole-FTL --config dns.hosts 2>/dev/null | tr -d '[]' | tr ',' '\n' | grep -v '0.knoe.dev' | grep -v '^$' | sed 's/^ *//' | sed 's/ *$//')
NEW_ENTRIES="{% for r in knoe_dev_dns_records %}{{ r.ip }} {{ r.name }}{% if not loop.last %}\n{% endif %}{% endfor %}"
ALL=$(printf '%s\n%s' "$CURRENT" "$(printf '%b' "$NEW_ENTRIES")" | grep -v '^$' | sort -u)
JSON=$(echo "$ALL" | awk '{print "\"" $0 "\""}' | paste -sd ',' | sed 's/^/[/;s/$/]/')
pihole-FTL --config dns.hosts "$JSON"
pihole reloaddns
register: pihole_hosts_result
changed_when: true
- name: Read current Pi-hole FTL DB journal mode (WAL?)
ansible.builtin.command: sqlite3 /etc/pihole/pihole-FTL.db "PRAGMA journal_mode;"
register: pihole_journal