Anonymized-DNS through DNScrypt with Pi-Hole integration

This can of course be combined with other things such as pi-hole:

Change the listening port to something else than 53:

listen_addresses = ['127.0.0.1:53', 'YOURCOREELECIP:53']

In: nano /storage/.opt/etc/dnscrypt-proxy.toml

Restart: /storage/.opt/etc/init.d/S09dnscrypt-proxy2 restart

Check that its now quiet around 53 & 80 is free and clear:
netstat -nltup | grep ‘Proto|:53 |:67 |:80 |:471’

Install pie-hole:

docker run -d \
    --name pihole \
    -p 53:53/tcp -p 53:53/udp \
    -p 80:80 \
    -p 443:443 \
    -e TZ="America/Chicago" \
    -v "$(pwd)/etc-pihole/:/etc/pihole/" \
    -v "$(pwd)/etc-dnsmasq.d/:/etc/dnsmasq.d/" \
    --dns=127.0.0.1 --dns=1.1.1.1 \
    --restart=unless-stopped \
    pihole/pihole:latest
docker ps
docker exec -it batsoup32e1 /bin/bash
./start.sh

Apply this fix if it the admin site does not show up!

Changes in pie-hole: Settings - DNS
Uncheck all checked upstream DNS’s
Add custom DNS coreelecIP#YOURPORT

Lists be here, which also suggest this pi-hole:latest + autoupdate tool (read instructions)

Same deal, but use this when pulling the pi-hole latest docker:

docker run -d \
    --name pihole \
    -p 53:53/tcp -p 53:53/udp \
    -p 80:80 \
    -p 443:443 \
    -e TZ="America/Chicago" \
    -v "$(pwd)/etc-pihole/:/etc/pihole/" \
    -v "$(pwd)/etc-dnsmasq.d/:/etc/dnsmasq.d/" \
    -v "$(pwd)/etc-pihole-updatelists/:/etc/pihole-updatelists/" \
    --dns=127.0.0.1 --dns=1.1.1.1 \
    --restart=unless-stopped \
    jacklul/pihole:latest

That’s it.