Hi, I was planning on the VPS+Reverse proxy setup instead of port-forwarding from my home address (basically, Wireguard VPN to VPS box which will host a reverse proxy, be hardened and only open necessary ports). I will be hosting Pi-Hole+Unbound at home, and would like to access it from outside. I do not want to share my DNS with anyone else. How would I be able to achieve that with this setup? Do I have to open a port on the VPS for another VPN endpoint (Wireguard), which will basically mean I have to go through two VPN tunnels to get to my DNS? I can’t quite figure it out.

Thanks for your time!

  • death916@lemmy.death916.xyzEnglish
    1·
    2 years ago

    I use tailscale on my pihole container and add the tailscale ip as dns for all tailscale devices. Then u just have tailscale one your phone laptop or w.e and will be using that dns. No ports opened at all.

  • aucubin@lemmy.aucubin.deEnglish
    1·
    2 years ago

    You can add the device you want to use PiHole with to your WireGuard VPN and set the DNS property for the Interface.

    Then you need to add the PiHole machine to the VPN, if it is not already reachable (or you use your existing machine in the internal networking with masquerade)

    • cjerrington@kbin.social
      1·
      2 years ago

      Cloudflare DNS proxied dns to be exact too. They also allow DNS only which is not routed through Cloudflare and the services.