Install pi-hole directly on opnsense device

[my2_8_9]

Hello,

In my SOHO network I am running an APU2C4 on which I installed the current opnsense (dhcp). I switched from pfsense a couple of months ago and everything is running smoothly,
I have seen pi-hole in action and I especially like the versility to block addresses for each single client. I know that pi-hole not only runs on raspberry pis but also on other linux machines. So that should basically also work on an apu2c4 with opnsense installed.
I'd prefer not to add a dedicated raspberry for pi-hole, if possible, as this would clutter even more he technical area where I have a cable modem, the apu2-router, and a switch.

My question:
Is it possible to install pi-hole directly on the apu2c4 machine? Has anybody done this and perhaps has a tutorial or alike?
Any help is appreciated.
I haven't found this topic here in the forum, but if I overlooked it, I would also be grateful for a hint.
Thank you
Marc

[DrGonzoNL]

Hi Marc,

OPNSense runs on a hardened version of FreeBSD, this is not the same as Linux. There is a request to make Pihole available on FreeBSD but it does not seem to get much traction. https://discourse.pi-hole.net/t/freebsd-compatability/2092/16

You have three options:
1. Run a VM on the APU and have an instance for the Pihole and OPNSense. Proxmox as an example can run both
2. Use the options within OPNSense that have the same function as PiHole but not the GUI Pihole has. https://www.routerperformance.net/opnsense/dnsbl-via-bind-plugin/  This does not support per client settings as far as I know. I use Pihole on a Rpi
3. Get a RPi

[my2_8_9]

Thank you DrGonzoNL
I understand the point about the hardened FreeBSD. I will think about the Proxmox option. I still have an old ALIX1d device here. Any idea whether proxmox will also work on this device?
Thanks for you quick and concise help!
Marc

[DrGonzoNL]

You're welcome!
According to https://www.pcengines.ch/pdf/alix1c.pdf you should be able to run a Debian distribution on the alix. So proxmox will not be necessary.

[binaryanomaly]

Just to have mentioned it, sensei (plugin) has similar adblocking capabilities if that is an option for your.