enable to not answer id.server and hostname.bind queries.
    hide-identity: yes

    enable to not answer version.server and version.bind queries.
    hide-version: yes

  pihole:
    container_name: pihole
    hostname: pihole
    image: pihole/pihole:latest
    ports:
      - '53:53/tcp'
      - '53:53/udp'
#      - '67:67/udp'
      - '8182:80'
      - '8183:443'
    restart: unless-stopped
    networks:
      t2_proxy:
        ipv4_address: 192.168.90.8
    volumes:
      - $DOCKERDIR/pihole/resolv.conf:/etc/resolv.conf:ro
      - $DOCKERDIR/pihole/pihole:/etc/pihole
      - $DOCKERDIR/pihole/dnsmasq.d:/etc/dnsmasq.d
      - $DOCKERDIR/pihole/hosts:/etc/hosts:ro
#    cap_add:
#      - NET_ADMIN
    environment:
      - ServerIP=${SERVER_IP}
      - TZ=${TZ}
      - WEBPASSWORD=$PI_HOLE_PASS
      - PROXY_LOCATION=pihole
      - VIRTUAL_HOST=pihole.${DOMAINNAME}
      - VIRTUAL_PORT=80
      - DNS1=127.0.0.1#5335
      - DNS2=no
    labels:
      - "traefik.enable=true"
      ## HTTP Routers
      - "traefik.http.routers.pihole-rtr.entrypoints=https"
      - "traefik.http.routers.pihole-rtr.rule=Host(`pihole.$DOMAINNAME`)"
      - "traefik.http.routers.pihole-rtr.tls.certresolver=dns-cloudflare"
      ## Middlewares
      - "traefik.http.routers.pihole-rtr.middlewares=chain-oauth@file" 
      ## HTTP Services
      - "traefik.http.routers.pihole-rtr.service=pihole-svc"
      - "traefik.http.services.pihole-svc.loadbalancer.server.port=80"

# Minimize logs
    # Do not print one line per query to the log
    log-queries: no
    # Do not print one line per reply to the log
    log-replies: no
    # Do not print log lines that say why queries return SERVFAIL to clients
    logfile: /dev/null
	

 #log-replies: no

	
	● unbound-resolvconf.service - Unbound DNS server via resolvconf
   Loaded: loaded (/lib/systemd/system/unbound-resolvconf.service; enabled; vendor preset: enabled)
   Active: active (exited) (Result: exit-code) since Tue 2020-08-04 01:10:31 EDT; 10s ago
  Process: 12146 ExecStop=/usr/lib/unbound/package-helper resolvconf_stop (code=exited, status=1/FAILURE)
  Process: 12156 ExecStart=/usr/lib/unbound/package-helper resolvconf_start (code=exited, status=1/FAILURE)
 Main PID: 12156 (code=exited, status=1/FAILURE)
      CPU: 0
   CGroup: /system.slice/unbound-resolvconf.service

Aug 04 01:10:31 linuxboard package-helper[12156]: /etc/unbound/unbound.conf.d/pi-hole.conf:142: error: unknown keyword 'log-replies'
Aug 04 01:10:31 linuxboard package-helper[12156]: /etc/unbound/unbound.conf.d/pi-hole.conf:142: error: stray ':'
Aug 04 01:10:31 linuxboard package-helper[12156]: /etc/unbound/unbound.conf.d/pi-hole.conf:142: error: unknown keyword 'no'
Aug 04 01:10:31 linuxboard package-helper[12156]: read /etc/unbound/unbound.conf failed: 3 errors in configuration file

# Time to live minimum for RRsets and messages in the cache. If the minimum
# kicks in, the data is cached for longer than the domain owner intended,
# and thus less queries are made to look up the data. Zero makes sure the
# data in the cache is as the domain owner intended, higher values,
# especially more than an hour or so, can lead to trouble as the data in
# the cache does not match up with the actual data anymore
cache-min-ttl: 300
cache-max-ttl: 86400
msg-cache-size: 128m
rrset-cache-size: 256m

# more cache memory. rrset-cache-size should twice what msg-cache-size is.
msg-cache-size: 50m
rrset-cache-size: 100m

        tls-cert-bundle:"etc/ssl/certs/ca-certificates.crt" # on Pihole, other systems might have different spots

forward-zone:
        name: "."
	forward-addr: #########@853 # replace with the DNS of your choice 
        forward-addr:##########@853 # replace with the DNS of your choice
	forward-tls-upstream: yes