GitHeld

Create DNS-over-TLS bridge with Pi-hole, unbound and stubby on Ubuntu Server

Few months ago, I've made a similar work but I wanted something a little more easier to manage. Please have a look at here for my previous work.

This time, I'm gonna do pretty much the same thing but using Pi-hole as base then modify it to include unbound and stubby.

This way, I can use the power of Pi-hole with some additional security layers:

• Recursive DNS check (unbound)
• DNS-over-TLS (stubby)

GitHeld

Swap

First enable swap just incase

sudo fallocate -l 2G /swapfile
sudo chmod 600 /swapfile
sudo mkswap /swapfile
sudo swapon /swapfile
sudo cp /etc/fstab /etc/fstab.bak
echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab
sudo sysctl vm.swappiness=10

GitHeld

1. openssl genrsa -des3 -passout pass:<your_pass_key_here> -out server.pass.key 2048
2. openssl rsa -passin pass:<your_pass_key_here> -in server.pass.key -out server.key
3. openssl req -new -key server.key -out server.csr
4. openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt