# Environment Variables for Pi-hole

[![GitHub-logo.png](https://wiki.aeoneros.com/uploads/images/gallery/2024-09/scaled-1680-/Ot77lQOoFS2b2cPK-github-logo.png)](https://github.com/pi-hole/docker-pi-hole?tab=readme-ov-file#environment-variables)

<table id="bkmrk-variable-default-val"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**PIHOLE\_DNS\_**</td><td>8.8.8.8;8.8.4.4</td><td>Upstream DNS servers, separated by `;`. Supports custom ports (e.g., `127.0.0.1#5053`). DNS servers added via the web interface will be overwritten on restart.</td></tr><tr><td>**DNSSEC**</td><td>false</td><td>Enable DNSSEC support (`true` or `false`).</td></tr><tr><td>**DNS\_BOGUS\_PRIV**</td><td>true</td><td>Prevents forwarding reverse lookups for private ranges.</td></tr><tr><td>**DNS\_FQDN\_REQUIRED**</td><td>true</td><td>Prevents forwarding of non-FQDNs (Fully Qualified Domain Names).</td></tr><tr><td>**REV\_SERVER**</td><td>false</td><td>Enables DNS conditional forwarding for local device name resolution.</td></tr><tr><td>**REV\_SERVER\_DOMAIN**</td><td>unset</td><td>Set the domain of the local network router if conditional forwarding is enabled.</td></tr><tr><td>**REV\_SERVER\_TARGET**</td><td>unset</td><td>IP of the local network router when conditional forwarding is enabled.</td></tr><tr><td>**REV\_SERVER\_CIDR**</td><td>unset</td><td>Reverse DNS zone (e.g., `192.168.0.0/24`) for conditional forwarding.</td></tr><tr><td>**DHCP\_ACTIVE**</td><td>false</td><td>Enable DHCP server (`true` or `false`).</td></tr><tr><td>**DHCP\_START**</td><td>unset</td><td>Start IP for DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_END**</td><td>unset</td><td>End IP for DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_ROUTER**</td><td>unset</td><td>Router (gateway) IP for the DHCP server (if DHCP is enabled).</td></tr><tr><td>**DHCP\_LEASETIME**</td><td>24</td><td>Lease time for DHCP (in hours).</td></tr><tr><td>**PIHOLE\_DOMAIN**</td><td>lan</td><td>Domain name sent by the DHCP server.</td></tr><tr><td>**DHCP\_IPv6**</td><td>false</td><td>Enable DHCP IPv6 support (`true` or `false`).</td></tr><tr><td>**DHCP\_rapid\_commit**</td><td>false</td><td>Enable DHCPv4 rapid commit.</td></tr><tr><td>**VIRTUAL\_HOST**</td><td>${HOSTNAME}</td><td>Sets the virtual host for web access (e.g., `http://pi.hole/admin`).</td></tr><tr><td>**IPv6**</td><td>true</td><td>Disables IPv6 configuration when set to `false` (helpful for Unraid).</td></tr><tr><td>**TEMPERATUREUNIT**</td><td>c</td><td>Sets temperature unit (`c`: Celsius, `k`: Kelvin, or `f`: Fahrenheit).</td></tr><tr><td>**WEBUIBOXEDLAYOUT**</td><td>boxed</td><td>Use boxed or traditional layout for the web interface.</td></tr><tr><td>**QUERY\_LOGGING**</td><td>true</td><td>Enables or disables query logging.</td></tr><tr><td>**WEBTHEME**</td><td>default-light</td><td>User interface theme (options: `default-dark`, `default-light`, `default-auto`, etc.).</td></tr><tr><td>**WEBPASSWORD\_FILE**</td><td>unset</td><td>Set admin password via Docker secrets. Ignored if `WEBPASSWORD` is set.</td></tr></tbody></table>

### Advanced Variables

<table id="bkmrk-variable-default-val-1"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**INTERFACE**</td><td>unset</td><td>NIC interface for DNS or DHCP services.</td></tr><tr><td>**DNSMASQ\_LISTENING**</td><td>unset</td><td>Listening behavior (`local`, `all`, `single`).</td></tr><tr><td>**WEB\_PORT**</td><td>unset</td><td>Custom web interface port (may affect the "blocked" page functionality).</td></tr><tr><td>**WEB\_BIND\_ADDR**</td><td>unset</td><td>Bind address for the web interface.</td></tr><tr><td>**SKIPGRAVITYONBOOT**</td><td>unset</td><td>Skip updating Gravity Database on boot (set to `1` to skip).</td></tr><tr><td>**CORS\_HOSTS**</td><td>unset</td><td>List of FQDNs allowed for CORS (comma-separated).</td></tr><tr><td>**CUSTOM\_CACHE\_SIZE**</td><td>10000</td><td>Sets cache size for `dnsmasq`. Ignored if DNSSEC is enabled.</td></tr><tr><td>**FTL\_CMD**</td><td>no-daemon</td><td>Customize `dnsmasq` options (e.g., `no-daemon -- --dns-forward-max 300`).</td></tr><tr><td>**FTLCONF\_\[SETTING\]**</td><td>unset</td><td>Customize `pihole-FTL.conf` settings (e.g., `FTLCONF_LOCAL_IPV4`).</td></tr></tbody></table>

### Experimental Variables

<table id="bkmrk-variable-default-val-2"><thead><tr><th>Variable</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td>**DNSMASQ\_USER**</td><td>unset</td><td>Change the user that `FTLDNS` runs as (`pihole` or `root`).</td></tr><tr><td>**PIHOLE\_UID**</td><td>999</td><td>Override Pi-hole's default user ID.</td></tr><tr><td>**PIHOLE\_GID**</td><td>999</td><td>Override Pi-hole's default group ID.</td></tr><tr><td>**WEB\_UID**</td><td>33</td><td>Override the `www-data` user ID.</td></tr><tr><td>**WEB\_GID**</td><td>33</td><td>Override the `www-data` group ID.</td></tr><tr><td>**WEBLOGS\_STDOUT**</td><td>0</td><td>Redirects web logs to stdout when set to `1`.</td></tr></tbody></table>