From dee9ffba3f47ad239e6a313536cc8469844d3685 Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Fri, 5 Aug 2022 12:29:21 +0000
Subject: [PATCH] Pi-hole - install requisites and clone Pi-hole repo

---
 pihole/install.sls | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/pihole/install.sls b/pihole/install.sls
index 78bca7a..4d6c9bc 100644
--- a/pihole/install.sls
+++ b/pihole/install.sls
@@ -12,6 +12,7 @@
     - repl: 'https://'
     - flags: [ 'IGNORECASE', 'MULTILINE' ]
 
+
 {% set IP = salt['cmd.shell']('qubesdb-read /qubes-ip') %}
 {% set GW = salt['cmd.shell']('qubesdb-read /qubes-gateway') %}
 
@@ -45,4 +46,34 @@ Pihole_update:
   pkg.uptodate:
     - refresh: True
 
+Pihole_installed:
+  pkg.installed:
+    - pkgs:
+      - qubes-core-agent-networking
+      - qubes-core-agent-passwordless-root
+      - curl
+      - dnsutils
+      - firefox-esr
+      - git
+      - idn2
+      - lighttpd
+      - netcat-openbsd
+      - php-cgi
+      - php-common
+      - php-intl
+      - php-json
+      - php-sqlite3
+      - php-xml
+      - unzip
+
+Pihole-systemd-mask:
+  cmd.run:
+    - name: systemctl disable systemd-resolved
+
+https://github.com/pi-hole/pi-hole.git:
+  git.latest:
+    - name: https://github.com/pi-hole/pi-hole.git
+    - user: root
+    - target: /root/pi-hole
+
 {% endif %}