Ansible Role pihole on Galaxy

The Ansible role head1328.pihole is now on Ansible Galaxy . It deploys Pi-hole as a rootless container via Podman Quadlets on Raspberry Pi OS / Debian Trixie - including a Caddy reverse proxy with internal TLS.

What It Does

#

• Installs Pi-hole as a rootless container using Podman + systemd Quadlets
• Exposes the web interface through Caddy with internal TLS (no Let’s Encrypt, no public ports required)
• Redirects privileged ports (53, 443) via iptables PREROUTING to the rootless container ports (5353, 8443)
• Optional podman-auto-update for registry-driven container updates
• Targeted at internal networks (e.g. FRITZ!Box environments), not public hosting

What It’s For

#

For anyone running a Pi as a network-wide DNS filter without hand-rolling systemd --user, Quadlets and iptables. The role depends on head1328.podman and brings everything else along.

If you’d rather follow the setup step by step: the full tutorial is Pi-hole on the Raspberry Pi with Podman Quadlets .

Installation

#

ansible-galaxy role install head1328.pihole

License

#

AGPL-3.0-or-later.

Acknowledgments

#

• Pi-hole - network-wide ad and tracker blocker
• Podman - daemonless container runtime
• Caddy - reverse proxy with automatic TLS
• Ansible Galaxy - role registry