# Pi-hole

Pi-hole is a network-level Domain Name System (DNS) sinkhole that blocks Internet advertisements and tracking domains. It is open source and self-hosted, installable on Kubernetes (Helm), Proxmox, TrueNAS, Docker Hub, Umbrel, ZimaOS and Unraid.

Canonical page: https://ourlocalhost.com/app/13/pi-hole

## Description

Pi-hole is a network-level Domain Name System (DNS) sinkhole that blocks Internet advertisements and tracking domains. It serves DNS queries for a private network and can optionally provide Dynamic Host Configuration Protocol (DHCP) services to clients. It is intended for self-hosters who want centralized ad blocking for devices, media players, mobile apps, and browsers on their local network. Use it when you need a lightweight, Linux-based DNS solution that reduces unwanted network traffic and supports blocklists.

## Platform availability

Available on 6 of 9 platforms: Unraid, TrueNAS, Umbrel, ZimaOS, Proxmox, Helm.

## Health score

78/100 (Good), based on 5 of 5 factors.
- Maintained: 92 (last commit 109 days ago)
- Popular: 96 (61,182 GitHub stars)
- Easy to install: 70 (3 install platforms, install notes, setup guide, Docker image)
- Light to run: 95 (512 MB minimum RAM, runs on ARM)
- Security check: 20 (1 serious finding, 1 minor, CI, tests, OpenSSF Scorecard 6.2/10)

## Security check

1 serious finding: The app downloads a script and runs it in a shell at runtime.
Automated checks on commit f47b8ed, 11 Oct 2026. Not an audit.

## Links

- Documentation: https://docs.pi-hole.net/
- Kubernetes (Helm): https://artifacthub.io/packages/helm/mojo2600/pihole
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=pihole
- TrueNAS: https://apps.truenas.com/catalog/pihole
- Docker Hub: https://hub.docker.com/r/pihole/pihole
- Umbrel: https://apps.umbrel.com/app/pi-hole
- ZimaOS: https://github.com/IceWhaleTech/CasaOS-AppStore/tree/main/Apps/Pihole
- Unraid: https://ca.unraid.net/apps/binhex-official-pihole-07tawp90p2205t?q=binhex-official-pihole
- GitHub: https://github.com/pi-hole/pi-hole
- Official website: https://pi-hole.net/

## Common questions

### How do I make all devices on my network use Pi-hole automatically?

Point your router's DHCP settings at Pi-hole so DHCP clients use it as their DNS server, or enable Pi-hole's optional DHCP server to assign it to devices.

### Can Pi-hole protect devices while they are on mobile data or public Wi-Fi?

Pair it with a VPN such as WireGuard so your phone and laptop stay protected on mobile data and public Wi-Fi.

### Can I deploy Pi-hole in Docker?

Pi-hole can run in a Docker container, and the README points to the official Docker images for deployment.

### Does Pi-hole have an API for scripting or automation?

It provides a full REST API with built-in documentation for scripting and extending everything.

### What should I check first if Pi-hole is not working?

Make sure all dependencies are installed, including updated packages, and that the DNS server is running.

## Alternatives

- AdAway: An ad blocker that uses the hosts file.
- AdGuard: AdGuard is the best way to get rid of intrusive ads and online tracking, and to protect your computer from malware.
- AdGuard Home: AdGuard Home is a self-hosted DNS server that blocks ads and trackers across your entire home network by re-routing tracking domains to a b…
- Blokada: Blokada is the popular ad blocker and privacy app for Android and iOS.
- Control D: Control D is a modern and customizable DNS service that blocks threats, unwanted content and ads - on all devices.
- NextDNS: NextDNS protects you from all kinds of security threats, blocks ads and trackers on websites and in apps and provides a safe and supervised…
- OpenSnitch: Firewall for Linux providing interactive outbound filtering, blocking ads and malware domains, configurable via GUI, with centralized node…
- Portmaster: Free and open-source tool that monitors all network activity, blocks unwanted connections, uses filter lists for ads and malware, enforces…
- Privoxy: Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, co…
- RethinkDNS: An OpenSnitch-inspired firewall and network monitor + a pi-hole-inspired DNS over HTTPS client with blocklists.
- Technitium DNS Server: Technitium DNS Server is an open source tool that can be used as a personal local DNS server for privacy &amp; security.
- simplewall: Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.

---
Source: Our Local Host (https://ourlocalhost.com/app/13/pi-hole), the self-hosted and open-source app directory.
