Cloudflared - help needed - DNS for families

[Antergosgeek]

Hi,

New to pihole, installed it on a multipass instance running on my m1 Mac in Unifi network. So far working pretty well. Running pihole v5.18.1

I also set up cloudflared like this:
https://docs.pi-hole.net/guides/dns/cloudflared/

Also followed this:
https://ben.balter.com/2020/12/04/over-engineered-home-network-for-privacy-and-security/#pi-hole-to-block-ads-and-trackers

Now I am wondering about two things:

1. where is the config.yml for cloudflared that is usually referenced (I have no config.yml just the and /etc/default/cloudflared file with this # Commandline args for cloudflared, using Cloudflare DNS CLOUDFLARED_OPTS=--port 5053 --upstream https://1.1.1.1/dns-query --upstream https://1.0.0.1/dns-query
2. how to change it from 1.1.1.1 to the cloudflared filtered DNS for families?

Overall a little confused by this:
https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families

and how to set it up. Should I use 1.1.1.3 or https://family.cloudflare-dns.com/dns-query and where to put it etc.

Can anyone help?

Thank you!

[DanSchaper]

@Antergosgeek

where is the config.yml for cloudflared that is usually referenced

I don't see that file referenced in our guide so I don't know where or how it would be used.

@Antergosgeek

how to change it from 1.1.1.1 to the cloudflared filtered DNS for families?

Replace 1.1.1.1 with 1.1.1.3 in /etc/default/cloudflared and replace 1.0.0.1 with 1.0.0.3.

@Antergosgeek

Should I use 1.1.1.3 or https://family.cloudflare-dns.com/dns-query and where to put it etc.

Use the bare IP address. The full URL is used for DoH and you are not using that here.

[Antergosgeek]

First of all Thank you so much for your reply!

@DanSchaper

I don't see that file referenced in our guide so I don't know where or how it would be used.

That’s ok, just see it referenced in other posts and tutorials so was wondering. I like your guide though, very comprehensive and easy to follow!

@DanSchaper

Replace 1.1.1.1 with 1.1.1.3 in /etc/default/cloudflared and replace 1.0.0.1 with 1.0.0.3.

Perfect, thank you!

@DanSchaper

Use the bare IP address. The full URL is used for DoH and you are not using that here.

This comment I do not fully understand. But will use the bare IP. Can you explain further?

Really appreciate the help.

[DanSchaper]

@Antergosgeek

Can you explain further?

It's a more technical implementation that isn't needed in this kind of setup. DoH is DNS over HTTP(S) that tries to obfuscate DNS queries by hiding them on port 443 (https://) for a feeling of privacy.

[Antergosgeek]

Ok, that makes sense. Thank you so much for your help!

So far everything working well. I have tried pihole in the past and never managed to get a good implementation going but now finally got it up and working and it works pretty well I have to say!

Very nice!