{"id":15148431,"url":"https://github.com/deathbybandaid/piadvanced","last_synced_at":"2025-10-24T03:31:48.218Z","repository":{"id":97908141,"uuid":"88348005","full_name":"deathbybandaid/piadvanced","owner":"deathbybandaid","description":"This started as a custom install for my pihole!","archived":false,"fork":false,"pushed_at":"2019-10-10T15:13:17.000Z","size":789,"stargazers_count":174,"open_issues_count":4,"forks_count":25,"subscribers_count":15,"default_branch":"master","last_synced_at":"2025-01-30T22:42:32.903Z","etag":null,"topics":["backup","debian","dnsmasq","firewall","gateway","iptables","motd","openvpn","pi-hole","raspberry-pi","raspberrypi","setup","tinkerer","tweaking","ubuntu","webserver"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/deathbybandaid.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-04-15T13:17:09.000Z","updated_at":"2025-01-05T03:03:45.000Z","dependencies_parsed_at":null,"dependency_job_id":"8adedcdf-cd0f-439f-a9ed-053aef070788","html_url":"https://github.com/deathbybandaid/piadvanced","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deathbybandaid%2Fpiadvanced","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deathbybandaid%2Fpiadvanced/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deathbybandaid%2Fpiadvanced/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deathbybandaid%2Fpiadvanced/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/deathbybandaid","download_url":"https://codeload.github.com/deathbybandaid/piadvanced/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":237910078,"owners_count":19385829,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backup","debian","dnsmasq","firewall","gateway","iptables","motd","openvpn","pi-hole","raspberry-pi","raspberrypi","setup","tinkerer","tweaking","ubuntu","webserver"],"created_at":"2024-09-26T13:03:45.420Z","updated_at":"2025-10-24T03:31:47.865Z","avatar_url":"https://github.com/deathbybandaid.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# piadvanced\n\n# NOTICE\nThis script needs more of my attention, as some packages are broken.\n\nUsing this script may break things.\n\n## I am doing a complete rewrite\n\n\n### Thanks to the people of pihole-discourse and reddit. This is just a collection of other people's work in a nice package. I do not claim credit for anything other than creating this series of scripts.\n\n* This is a custom install for my pi! I am a tinkerer, and when I tinker, I tend to break things!!!\n* I started this as a much simpler script to help assist me in getting things back up and running as fast as possible.\n* A few of these things are easily done with raspi-config,, but this streamlines the process.\n* I am not a programmer, but I know enough to get into trouble.\n\n##### With some tweaking could work on debian devices that aren't raspberry pi's\n\n### I will be updating this with new stuff all the time. you can always run git pull the /etc/piadvanced to download any changes.\n\n# If you are concerned about renaming the pi user for security reasons,\n\nhttps://github.com/deathbybandaid/replace-default-pi-user\n\n# Instructions\n\nsudo git clone https://github.com/deathbybandaid/piadvanced.git /etc/piadvanced/\n\n### The main script\n\nsudo bash /etc/piadvanced/extendedinstall.sh\n\n# Enjoy\n\n# Here is what this half MB bad boy does:\n\n#### This install:\n* Will ask you many yes/no questions. If you don't want to install something, simply say NO!\n* Is set up like \"modules\" I plan on adding more pi projects to it later. If it can be automated, it should go here. Message me if you have any reccomendations to add.\n\n### I suggest that you use the removedefaultpiuser script below. This will bolster your pi's security by not using the default username.\n\n## Makes backups of many of the default configuration files.\n* You can find the backups in /etc/piadvanced/backups\n\n## Configures a strong firewall using iptables.\n* This is based on what you choose to install.\n* All traffic to the pi is blocked unless there is a rule that allows the traffic.\n  * Rules can be added/removed with sudo /etc/iptables.firewall.rules\n\n## Some basic settings:\n\n### Set the time\n* Set the timezone\n* Change your NTP servers\n* Add a script to update the time every half hour.\n\n### SSH\n* on/off\n* fail2ban\n  * Helps protect against brute-force attempts.\n  * Configure for other services by sudo nano /etc/fail2ban/jail.conf\n* psad\n\n### Random Number Fix with rng-tools\n* Greatly helps when the system needs to randomize something.\n\n### Memory\n* Set the memory split.\n* Use an experimental tweak to unlock 16MB of ram on the pi2 or pi3.\n\n### Network interfaces\n* Set the hostname\n* Set a static ip for eth0\n* Connect to wifi easily\n* Set a static ip for wlan0\n\n## MOTD tweak\n* This makes the login message much nicer than a bloc of text\n  * For details see: https://github.com/deathbybandaid/pimotd\n\n## Get's your system up to date\n#### Adds sources for debian stretch\n#### Updates and Upgrades\n#### Installs some basic programs and dependencies.\n(if curious what it installs, look at the script files)\n\n# Admin Mail\nHandy if you want to get email from your device when things happen, or you need updates.\n* Apticron\n* Mailutils\n* Exim4\n\n## Dynamic Domain Name Services\n* No-IP DUC (Dynamic Update Client)\n* DDClient, which I believe works with dyndns\n\n## VPN\n  * Port 1194 defualt\n* OpenVPN\n* piVPN\n\n## Administration Web UI's\n* Webmin\n  * Port 10000\n* Usermin\n  * Port 20000\n* Rpi Monitor\n  * Port 8889\n\n## xRDP\n* This let's you remote-in to your pi, using the Windows native Remote Desktop program.\n  * I have found this handy when fail2ban locks me out due to invalid password attempts.\n\n## DNSMasq\n* Gives the option to use the version 2.77test4.\n\n## DNSCrypt\nThis is fully functional, and works!\n\n## Pi-Hole\n* https://pi-hole.net/\n* Asks you to change the password for the webui immediately.\n* A dark theme, thanks to LKD70\n  * NOTE: DOES NOT WORK WITH Pi-Hole 3.0 update.\n  * Refer to https://github.com/lkd70/PiHole-Dark for details.\n* The Wally3k adlists.\n  * Configure this with sudo nano /etc/pihole/adlists.list\n* The Wally3k Block Page\n  * Refer to https://github.com/WaLLy3K/Pi-hole-Block-Page for details.\n  * Configure with sudo nano /var/phbp.ini\n* The ability to bypass by mac address.\n  * Configure with sudo nano /etc/dnsmasq.d/04-bypass.conf\n* The ability to add additional interfaces to allow dnsmasq to listen on.\n  * Configure with sudo nano /etc/dnsmasq.d/05-addint.conf\n* The ability to add your Windows Active-Directory DNS.\n  * Configure with sudo nano /etc/dnsmasq.d/06-activedirectory.conf\n* The ability to add custom redirects.\n  * Configure with sudo nano /etc/dnsmasq.d/07-customredirect.conf\n  * and /etc/piadvanced/installscripts/customRedirect.list\n* The ability to set permanent static ip's. Helpful if your re-install often\n  * Configure with sudo nano /etc/dnsmasq.d/08-staticip.conf\n* The ability to block a mac address from recieving an IP address.\n  * Configure with sudo nano /etc/dnsmasq.d/09-noip4you.conf\n* The ability to make pihole -up run every half-hour.\n* The ability to make pihole -g run every 6 hours.\n* The ability to remove stale lists once weekly.\n* A way to Parse lists not compatible with Pihole.\n  * Configure this with sudo nano /etc/piadvanced/piholetweaks/ublockpihole/lists.lst\n* A Second way to parse lists.\n  * Configure with sudo nano /var/www/html/admin/parser.php\n* A way to tweet daily blockings.\n  * Configure this with sudo nano /etc/piadvanced/piholetweaks/piholetweeter.py\n  * Credit goes to https://github.com/DarthKeizer/Pi-Hole-stats-tweeter\n* Recieve a daily email with your stats.\n  * Credit goes to https://github.com/MilesGG/pi-hole-summary\n* HenningVanRaumle's Youtube Adblock List\n\n## Webservers\nWith the webservers, you can set the ip address and ports to listen on. This helps with port conflict issues.\n* Lightttpd\n* Apache\n* Nginx\n  * I have stuff in the works for nginx, stay tuned.\n\n## Guacamole\n* Refer to https://guacamole.incubator.apache.org/\n* Set up a RDP/VNC/Gateway for your home network.\n* It runs on Tomcat using Port 8080\n* The default username and password is guacadmin\n\n## Proxy programs\n  * These have the potential of being setup to function transparently alongside pihole.\n* Privoxy\n* Squid/Squidguard\n\n## CUPS\n* https://www.cups.org/\n* This is probably the nicest printer server software out there.\n\n## Grafana\n* Untested Install, should be sweet for data monitoring and stuff.\n\n## phpmyadmin\n\n## Nagios\n\n## AtoMiC-ToolKit\n* Refer to https://github.com/htpcBeginner/AtoMiC-ToolKit for more information.\n* Anything that is installed by this will need a firewall rule added.\n\n## Dplatform\n* See https://github.com/DFabric/DPlatform-ShellCore for details.\n\n## HASS\n* See https://github.com/home-assistant/fabric-home-assistant for details.\n* I had to cobble the installation a bit to make sure dependencies worked.\n* I also have it set to remove the reboot instruction from their install script.\n* I can't guarantee success on this one, my success has been hit or miss.\n\n## Things in the works:\n* Steam Cache\n* PXE Server\n* Nagios\n* OpenVAS\n* ShellinaBox\n* Plexboard\n* A wake-on-lan solution\n* Samba share\n* A script that makes regular backups to a directory with date/time stamps. maybe weekly.\n* Cerbot Let's Encrypt\n* Setting up / mounting a usb device for permanent storage.\n* Email server\n* A way to load in a pihole teleport.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdeathbybandaid%2Fpiadvanced","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdeathbybandaid%2Fpiadvanced","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdeathbybandaid%2Fpiadvanced/lists"}