LUKE SCHNUR
Infrastructure • Systems • Homelab
LinkedIn Project Portfolio
External • Verified Project History
I maintain a small set of published projects on LinkedIn, including this homelab deployment. It’s the place I’ll keep future project updates as I continue building out my environment.
Live from my homelab
Pi‑hole DNS Blocker
Pi‑hole blocks ads by denying DNS resolution for known ad domains pulled from a preloaded blocklist. When a device tries to reach one of those domains, Pi‑hole simply refuses to resolve it, so the ad never loads. I added a live tracker shown here and in the footer of every page that displays how many domains Pi‑hole has blocked today.
LIVE
queries blocked today

Architecture Overview

The site runs inside a containerized Nginx environment managed through Docker. The container isolates the web layer from the host system to keep it separate and self‑contained. This setup allows me to redeploy or adjust the web stack without affecting the underlying server.

All public traffic is routed through Cloudflare Tunnel, which exposes the site to the internet without opening any inbound ports on my home network. This keeps the host completely closed off from direct external access while still allowing the site to remain reachable. The tunnel acts as the only entry point, reducing the attack surface and keeping internal services private.

DNS & Network Layer

My network uses a two‑stage DNS setup designed for privacy and control:

This setup removes reliance on third‑party DNS providers and gives full visibility into DNS behavior. No upstream resolver means queries go directly to the root servers to improve privacy.

Security Mindset

I built this with the understanding that many people viewing it work in IT and know how to probe a system, so the public surface area is intentionally minimal and hardened to make casual inspection or access significantly more difficult :

Full Stack of Services

The whole environment runs on repurposed laptop hardware and supports the DNS, VPN, container, and web services that make up my homelab. It’s straightforward, reliable, and maintained by one person.