pihole-v6-unbound

Overview

This Docker deployment runs both Pi-Hole version 6 and Unbound in a single container. The base image for the container is the official Pi-Hole docker container, with an extra build step added to install the Unbound resolver directly into to the container based on instructions provided directly by the Pi-Hole team.

Runtime arguments

Web UI: http://[IP]:[PORT:80]/admin
Network: br0
Shell: sh
Privileged: false
Extra Params: --cap-add=NET_ADMIN --restart=unless-stopped --hostname=piholev6unbound

Template configuration

HTTPPorttcp

HTTP Web Interface Port

Target: 80
Default: 80
Value: 80

HTTPSPorttcp

HTTPS Web Interface Port

Target: 443
Default: 443
Value: 443

Port 53 TCPPorttcp

Port 53 TCP/UDP used for DNS traffic

Target: 53
Default: 53
Value: 53

Port 53 UDPPortudp

Port 53 TCP/UDP used for DNS traffic

Target: 53
Default: 53
Value: 53

Unbound PortPorttcp

Used internally by PiHole to route DNS requests to unbound.

Target: 5335
Default: 5335
Value: 5335

TimezoneVariable

See https://en.wikipedia.org/wiki/List_of_tz_database_time_zones

Target: TZ

Web PasswordVariable

Not setting this will result in a random password being generated.

Target: FTLCONF_webserver_api_password

ThemeVariable

Target: FTLCONF_webserver_interface_theme
Default: default-auto

PiHole DNS serversVariable

Set the DNS server(s) that Pi-hole uses seperated by semi-colons. Since we are using unbound, should be set to 127.0.0.1#5335

Target: FTLCONF_dns_upstreams
Default: 127.0.0.1#5335
Value: 127.0.0.1#5335

DNSSECVariable

Set to true to enable DNSSEC. Will add to logs.

Target: FTLCONF_dns_dnssec
Value: true

DNS Listening ModeVariable

Target: FTLCONF_dns_listeningMode
Default: single
Value: single

Host Path for /configPathrw

Appdata folder

Target: /config
Default: /mnt/user/appdata/pihole-unbound
Value: /mnt/user/appdata/pihole-unbound

/etc/piholePathrw

Pi-hole v6 moves all configuration into this folder.

Default: /mnt/user/appdata/pihole-unbound/etc_pihole-unbound
Value: /mnt/user/appdata/pihole-unbound/etc_pihole-unbound

Enable /dnsmasq.dVariable

Load custom user configuration files from /etc/dnsmasq.d/

Target: FTLCONF_misc_etc_dnsmasq_d
Default: false
Value: false

/etc/dnsmasq.dPathrw

This path is no longer necessary. Pi-hole V6 moves all config to the /etc/pihole/pihole.toml file.

Default: /mnt/user/appdata/pihole-unbound/etc_pihole_dnsmasq-unbound
Value: /mnt/user/appdata/pihole-unbound/etc_pihole_dnsmasq-unbound

DNSMASQ Config LinesVariable

Use this to add dnsmasq config lines without adding .conf files. Lines should be seperated with a semi-colon.

Target: FTLCONF_misc_dnsmasq_lines

DHCP Server PortPortudp

Set to 67 if using Pi-hole as your DHCP server

Target: 67
Value: 67

NTP Server Port(Time)Portudp

Set to 123 if you are using Pi-hole as your NTP server and add--cap-add=SYS_TIME to Extra Parameters

Target: 123
Value: 123

Rev ServerVariable

Used to forward DNS requests to local records(router) for resolution. Use the following format: true,192.168.0.0/24,192.168.0.1#53,lan

Target: FTLCONF_dns_revServers
Default: false
Value: false

Links

Template Support Docker Hub Project

Details

Repository

mpgirro/docker-pihole-unbound

Registry

https://hub.docker.com/r/pihole/pihole

Last Updated2026-05-12

First Seen2025-04-01

Run pihole-v6-unbound on Unraid.

pihole-v6-unbound is listed in Community Apps for Unraid OS. Explore Unraid to build a flexible home server, NAS, or homelab.

Explore Unraid OS