# pihole-unbound-tailscale-dockerized

> Self-hosted Docker Compose project combining Pi-hole ad-blocking, Unbound recursive DNS, and Tailscale VPN for secure remote DNS access behind CGNAT.

- **Category:** DNS
- **Licence:** MIT
- **Latest version:** 1.0.0
- **Open source:** oss
- **Platforms:** Docker Compose
- **Tags:** Privacy, VPN, DNS, Pihole, Pi Hole, Ad Blocking, Recursive DNS, Docker, Docker Compose, Self Hosted, Tailscale, Unbound, Adblocker, Cgnat, Unbound Dns, Remote Access Server

## Description

This project provides a Docker Compose stack that deploys Pi-hole for network-wide ad and tracker blocking, Unbound as a recursive DNS resolver for privacy, and Tailscale for secure VPN access to the DNS server even behind CGNAT. It includes detailed setup instructions for macOS with Colima, Tailscale ACL configuration, and Unbound root hints/keys preparation. The stack uses three containers networked together: Unbound listens on port 5335, Pi-hole uses Unbound as its upstream DNS, and Tailscale provides encrypted remote access. The project is licensed under MIT and includes screenshots of the architecture, Pi-hole admin dashboard, Tailscale DNS settings, and nslookup tests.

## Links

- [Homepage](https://github.com/100dollarguy/pihole-unbound-tailscale-dockerized)
- [GitHub Repository](https://github.com/100dollarguy/pihole-unbound-tailscale-dockerized)

---
Source: https://selfhost.directory/project/pihole-unbound-tailscale-dockerized