Document the ports for encrypted DNS and HTTP/3 - #2068
Draft
DL6ER wants to merge 1 commit into
Draft
Conversation
DL6ER
force-pushed
the
new/encrypted-dns
branch
from
August 8, 2026 20:26
b5f416c to
8c6d8df
Compare
Signed-off-by: DL6ER <dl6er@dl6er.de>
DL6ER
force-pushed
the
new/encrypted-dns
branch
from
August 9, 2026 04:46
8c6d8df to
0e04697
Compare
yubiuser
reviewed
Aug 21, 2026
yubiuser
left a comment
Member
There was a problem hiding this comment.
I don't think we need an example compose file for encrypted DNS - our default example in the readme covers it sufficiently. But we can review again when v7 approaches.
Member
|
Yeah... we don't need both. I suggest to keep just one of them: or the |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds the ports that Pi-hole v7 needs when clients use it as an encrypted resolver - DNS-over-TLS on TCP
853and DNS-over-QUIC on UDP853- and the UDP port for HTTP/3 on the web interface. DNS-over-HTTPS gets no port of its own, it is served at/dns-queryon the HTTPS port, which is noted in the comments.Also adds
examples/docker-compose-encrypted-dns.ymland links the new documentation page in the README.Motivation and Context
FTL answers DoT/DoH/DoQ itself since pi-hole/FTL#2989 and pi-hole/FTL#3000, with configurable listener ports in pi-hole/FTL#3012, so a container can offer encrypted DNS to the clients in your network without a proxy in front of it - but only if the ports are published. Documentation counterpart: pi-hole/docs#1416.
This is a draft to be merged with the release of v7.0: the README and the example describe features that have not shipped yet.
How Has This Been Tested?
Not runtime-tested - this changes comments, an example file and a documentation link only. The example was checked to be valid YAML, and the repository's
editorconfig-checkerandcodespellboth pass.Types of changes
Checklist: