Hi, You are right, it is only usefull for a very small environment. It is for home, at work I really don't care about adding one (or more) systems to the environment. (ansible plays will keep them up2date and configured properly)
But I think I have figured it out. It is possible to specify a global forwarder with an alternative port, hence I could configure a container on the ipa server system listening on a different port and add that one as a forwarder. If it starts complaining about the ip being its own I will use cni to assign a different external ip to that container. I will test this in the next few days. Rob Op wo 9 feb. 2022 om 22:39 schreef Rafael Jeffman <rjeff...@redhat.com>: > Hi Rob, > > On Wed, Feb 9, 2022 at 9:32 AM Rob Verduijn via FreeIPA-users < > freeipa-users@lists.fedorahosted.org> wrote: > >> Hi all, >> >> I'm trying to reduce the number of systems in my network. >> Currently if I want to use a pi-hole in combination with freeipa one of >> them is going to use the other as a forwarder. >> >> And without some firewall/router port redirection magic (also hopelessly >> complicating things) this is not going to run on one system. >> >> Did anybody manage to integrate pi-hole into freeipa as a plugin or some >> other nifty solution making it possible to run it all on one system ? >> >> > This doesn't seem likely to be done soon, or ever, even if it is > something I'd personally have use for. > > You could have a single pi-hole in your network, but you would > like to have at least two IPA servers, a master and a replica. > > For very small setups, it would be a nice exercise, but apart > from that I don't see much use in having both in the system > (and sharing scarce resources). > > Rafael > > > Rob >> >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-le...@lists.fedorahosted.org >> Fedora Code of Conduct: >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >> Do not reply to spam on the list, report it: >> https://pagure.io/fedora-infrastructure >> > > > -- > Rafael Guterres Jeffman > Senior Software Engineer > FreeIPA - Red Hat > >
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure