summaryrefslogtreecommitdiffstats
path: root/roles/pihole/README.md
AgeCommit message (Collapse)AuthorFilesLines
2 daysDisable ipv6 completely and remove related codeAhmed Abdelhalim1-46/+0
Co-Authored-By: Claude.ai
2026-07-08Route IPv6 through WireGuard VPN via radvd and static gatewayAhmed Abdelhalim1-5/+22
Add radvd to gateway role to advertise Pi as high-preference IPv6 default router using the stable ULA prefix (fd1e:.../64). With FritzBox also sending RAs, devices end up with ECMP between Pi and FritzBox. To solve this, add network_ipv6_gateway (Pi's link-local) as a static route with metric 100 to all managed hosts — beats RA metric 425, ensuring all IPv6 default traffic goes through Pi. Fix IPv6 MASQUERADE in gateway-apply-rules: - Direct mode: add MASQUERADE on end0 (LAN devices use ULA source addresses not known to FritzBox, so Pi must NAT them) - FORWARD rules: restrict to RELATED,ESTABLISHED only — previously the broad ACCEPT rule passed un-NAT'd packets alongside masqueraded copies, causing duplicate SYNs, conntrack corruption, and RSTs - MASQUERADE/clear rules: match by interface not by source subnet (devices may use any source address, not just the ULA prefix) - VPN mode return traffic: explicitly restrict to wg+→end0 direction Add network_ipv6_gateway var (optional) to network role NM templates (ethernet, wifi, bridge) — injects a static IPv6 default route at metric 100 when set. Add rpi5 static route to FritzBox link-local so Pi keeps IPv6 after FritzBox RA is disabled. Force SSH to IPv4 for *.local hosts (AddressFamily inet) — prevents Ansible from hanging on mDNS returning multiple IPv6 addresses. Update gateway and pihole READMEs with two-step IPv6 setup process. Co-Authored-By: Claude.ai
2026-07-08Refactor network roleAhmed Abdelhalim1-4/+2
Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai
2026-07-08Update pihole docsAhmed Abdelhalim1-7/+15
2026-07-07Enable ipv6 on the rpiAhmed Abdelhalim1-11/+10
2026-07-03Disable unstable ipv6 setup for nowAhmed Abdelhalim1-1/+5
2026-07-03Attempt to enable ipv6 on the network but doesn't work stable enoughAhmed Abdelhalim1-6/+2
2026-07-01Update the README for gateway and pihole setup with details about ipv6Ahmed Abdelhalim1-17/+50
2026-06-30Disable ipv6 by defaultsAhmed Abdelhalim1-1/+0
Since ipv6 seems to be causing a lot of issues with the new ISP
2026-06-14Update pihole docs and fix minor issue with handlersAhmed Abdelhalim1-1/+7
2025-08-31Update pihole role to function as dhcp for the networkAhmed Abdelhalim1-2/+4
2025-08-21Fix the instruction on setting up pihole on fritz!boxAhmed Abdelhalim1-0/+1
2025-08-16Update pihole readmeAhmed Abdelhalim1-0/+14
2025-08-11Add pihole role to configure raspberry piAhmed Abdelhalim1-0/+13