# Other Informations

# Environment Variables for Pi-hole

[![GitHub-logo.png](https://wiki.aeoneros.com/uploads/images/gallery/2024-09/scaled-1680-/Ot77lQOoFS2b2cPK-github-logo.png)](https://github.com/pi-hole/docker-pi-hole?tab=readme-ov-file#environment-variables)

<table id="bkmrk-variable-default-val"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**PIHOLE\_DNS\_**</td><td>8.8.8.8;8.8.4.4</td><td>Upstream DNS servers, separated by `;`. Supports custom ports (e.g., `127.0.0.1#5053`). DNS servers added via the web interface will be overwritten on restart.</td></tr><tr><td>**DNSSEC**</td><td>false</td><td>Enable DNSSEC support (`true` or `false`).</td></tr><tr><td>**DNS\_BOGUS\_PRIV**</td><td>true</td><td>Prevents forwarding reverse lookups for private ranges.</td></tr><tr><td>**DNS\_FQDN\_REQUIRED**</td><td>true</td><td>Prevents forwarding of non-FQDNs (Fully Qualified Domain Names).</td></tr><tr><td>**REV\_SERVER**</td><td>false</td><td>Enables DNS conditional forwarding for local device name resolution.</td></tr><tr><td>**REV\_SERVER\_DOMAIN**</td><td>unset</td><td>Set the domain of the local network router if conditional forwarding is enabled.</td></tr><tr><td>**REV\_SERVER\_TARGET**</td><td>unset</td><td>IP of the local network router when conditional forwarding is enabled.</td></tr><tr><td>**REV\_SERVER\_CIDR**</td><td>unset</td><td>Reverse DNS zone (e.g., `192.168.0.0/24`) for conditional forwarding.</td></tr><tr><td>**DHCP\_ACTIVE**</td><td>false</td><td>Enable DHCP server (`true` or `false`).</td></tr><tr><td>**DHCP\_START**</td><td>unset</td><td>Start IP for DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_END**</td><td>unset</td><td>End IP for DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_ROUTER**</td><td>unset</td><td>Router (gateway) IP for the DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_LEASETIME**</td><td>24</td><td>Lease time for DHCP (in hours).</td></tr><tr><td>**PIHOLE\_DOMAIN**</td><td>lan</td><td>Domain name sent by the DHCP server.</td></tr><tr><td>**DHCP\_IPv6**</td><td>false</td><td>Enable DHCP IPv6 support (`true` or `false`).</td></tr><tr><td>**DHCP\_rapid\_commit**</td><td>false</td><td>Enable DHCPv4 rapid commit.</td></tr><tr><td>**VIRTUAL\_HOST**</td><td>${HOSTNAME}</td><td>Sets the virtual host for web access (e.g., `http://pi.hole/admin`).</td></tr><tr><td>**IPv6**</td><td>true</td><td>Disables IPv6 configuration when set to `false` (helpful for Unraid).</td></tr><tr><td>**TEMPERATUREUNIT**</td><td>c</td><td>Sets temperature unit (`c`: Celsius, `k`: Kelvin, or `f`: Fahrenheit).</td></tr><tr><td>**WEBUIBOXEDLAYOUT**</td><td>boxed</td><td>Use boxed or traditional layout for the web interface.</td></tr><tr><td>**QUERY\_LOGGING**</td><td>true</td><td>Enables or disables query logging.</td></tr><tr><td>**WEBTHEME**</td><td>default-light</td><td>User interface theme (options: `default-dark`, `default-light`, `default-auto`, etc.).</td></tr><tr><td>**WEBPASSWORD\_FILE**</td><td>unset</td><td>Set admin password via Docker secrets. Ignored if `WEBPASSWORD` is set.</td></tr></tbody></table>

### Advanced Variables

<table id="bkmrk-variable-default-val-1"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**INTERFACE**</td><td>unset</td><td>NIC interface for DNS or DHCP services.</td></tr><tr><td>**DNSMASQ\_LISTENING**</td><td>unset</td><td>Listening behavior (`local`, `all`, `single`).</td></tr><tr><td>**WEB\_PORT**</td><td>unset</td><td>Custom web interface port (may affect the "blocked" page functionality).</td></tr><tr><td>**WEB\_BIND\_ADDR**</td><td>unset</td><td>Bind address for the web interface.</td></tr><tr><td>**SKIPGRAVITYONBOOT**</td><td>unset</td><td>Skip updating Gravity Database on boot (set to `1` to skip).</td></tr><tr><td>**CORS\_HOSTS**</td><td>unset</td><td>List of FQDNs allowed for CORS (comma-separated).</td></tr><tr><td>**CUSTOM\_CACHE\_SIZE**</td><td>10000</td><td>Sets cache size for `dnsmasq`. Ignored if DNSSEC is enabled.</td></tr><tr><td>**FTL\_CMD**</td><td>no-daemon</td><td>Customize `dnsmasq` options (e.g., `no-daemon -- --dns-forward-max 300`).</td></tr><tr><td>**FTLCONF\_\[SETTING\]**</td><td>unset</td><td>Customize `pihole-FTL.conf` settings (e.g., `FTLCONF_LOCAL_IPV4`).</td></tr></tbody></table>

### Experimental Variables

<table id="bkmrk-variable-default-val-2"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**DNSMASQ\_USER**</td><td>unset</td><td>Change the user that `FTLDNS` runs as (`pihole` or `root`).</td></tr><tr><td>**PIHOLE\_UID**</td><td>999</td><td>Override Pi-hole's default user ID.</td></tr><tr><td>**PIHOLE\_GID**</td><td>999</td><td>Override Pi-hole's default group ID.</td></tr><tr><td>**WEB\_UID**</td><td>33</td><td>Override the `www-data` user ID.</td></tr><tr><td>**WEB\_GID**</td><td>33</td><td>Override the `www-data` group ID.</td></tr><tr><td>**WEBLOGS\_STDOUT**</td><td>0</td><td>Redirects web logs to stdout when set to `1`.</td></tr></tbody></table>

# Configure Adlists

To enhance Pi-hole's ability to block unwanted ads, trackers, and malicious content, you can add custom adlists. Below is a step-by-step guide to add adlists in Pi-hole, followed by a comprehensive list of popular adlists.


#### Step 1: Access Pi-hole's Web Interface

1. Open a web browser and navigate to your Pi-hole admin page. If you set up Pi-hole to run at a specific IP and port (e.g., `888`), you can visit the following URL:
    
    ```bash
    http://my-server-ip:888/admin/groups-adlists.php
    ```
2. Log in using your Pi-hole admin password.

#### Step 2: Navigate to the Adlists Section

1. Once logged in, go to the **Group Management** tab.
2. Select the **Adlists** option from the sidebar.

#### Step 3: Add New Adlists

1. In the **Adlists** page, you'll see an option to **Add a new adlist**.
2. Enter the URL of the adlist you wish to add in the "Address" field.
3. Add a comment or label for future reference (e.g., `Default`).
4. Click on **Add**.

Adlists with **7.303.876 Domain**s on the Adlists:

```
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts https://big.oisd.nl https://nsfw.oisd.nlhttps://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts https://v.firebog.net/hosts/static/w3kbl.txt https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt https://someonewhocares.org/hosts/zero/hosts https://raw.githubusercontent.com/VeleSila/yhosts/master/hosts https://winhelp2002.mvps.org/hosts.txt https://v.firebog.net/hosts/neohostsbasic.txt https://raw.githubusercontent.com/RooneyMcNibNug/pihole-stuff/master/SNAFU.txt https://paulgb.github.io/BarbBlock/blacklists/hosts-file.txt https://adaway.org/hosts.txt https://v.firebog.net/hosts/AdguardDNS.txt https://v.firebog.net/hosts/Admiral.txt https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt https://v.firebog.net/hosts/Easylist.txt https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts https://v.firebog.net/hosts/Easyprivacy.txt https://v.firebog.net/hosts/Prigent-Ads.txt https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/AmazonFireTV.txt https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt https://v.firebog.net/hosts/Prigent-Crypto.txt https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt https://phishing.army/download/phishing_army_blocklist_extended.txt https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt https://v.firebog.net/hosts/RPiList-Malware.txt https://v.firebog.net/hosts/RPiList-Phishing.txt https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts https://urlhaus.abuse.ch/downloads/hostfile/ https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt https://v.firebog.net/hosts/Prigent-Malware.txt https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser https://raw.githubusercontent.com/chadmayfield/my-pihole-blocklists/master/lists/pi_blocklist_porn_top1m.list https://v.firebog.net/hosts/Prigent-Adult.txt https://raw.githubusercontent.com/anudeepND/blacklist/master/facebook.txt https://raw.githubusercontent.com/xxcriticxx/.pl-host-file/master/hosts.txt https://raw.githubusercontent.com/Goooler/1024_hosts/master/hosts https://tgc.cloud/downloads/hosts.txt
```

---

### Conclusion

By adding these adlists, you can extend Pi-hole’s capabilities to block a wider variety of ads, trackers, and malicious content. This can significantly improve browsing speed, privacy, and security across your network. Make sure to regularly update Pi-hole’s Gravity to keep the adlists up to date.