IAmStoxe/wirehole resource
WireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and easily create a personally managed full or split-tunnel WireGuard VPN with ad blocking capabilities thanks to Pi-hole, and DNS caching, additional privacy options, and upstream providers via Unbound. observed · 2026-08-28
Health v2 · maintenance only
77/100
- Activity 99
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2190
- days_rel: n/a
- days_push: 8
- n_releases_24m: 0
Adoption not part of the score
4968 stars · 342 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
WireHole is a docker-compose project that combines WireGuard, Pi-hole, and Unbound into a single self-hosted VPN stack. It provides a personal full or split-tunnel VPN with network-wide ad blocking, private recursive DNS resolution, and DNSSEC validation.
Use cases
- set up my own wireguard vpn server with ad blocking
- self-host a vpn with pihole and unbound
- block ads on all devices through a vpn tunnel
- run a private dns resolver instead of google or cloudflare
- deploy a split tunnel vpn with docker compose
- encrypt my traffic on public wifi with my own server
- get dnssec validating dns for my vpn clients
When to choose
- you want a personal VPN you fully control instead of a commercial provider
- you want network-wide ad and tracker blocking for every connected device
- you want DNS queries resolved directly by authoritative servers with DNSSEC validation
- you want a quick, pre-configured docker-compose deployment of WireGuard, Pi-hole, and Unbound
When to avoid
- you need a managed VPN with many server locations and no server maintenance
- you cannot open ports or run a publicly reachable server
- you need obfuscation to evade deep packet inspection or censorship, which plain WireGuard does not provide
- you want a one-click consumer product rather than a self-managed stack
Facets
infra-config · maturity active
vpn caching security self-hosted networking deployment networking privacy self-hosted security self-hosted cloud wireguard pi-hole unbound ad-blocking dns docker-compose split-tunnel dnssec devops docker linux
2 sources
- readme: https://github.com/IAmStoxe/wirehole · fetched 2026-08-28 · b7218dea0d5d
- homepage: https://iamstoxe.com · fetched 2026-08-29 · b1011b0513bb
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| IAmStoxe/wirehole | main | 77 |
For agents
markdown · JSON · MCP: product_card(name="IAmStoxe/wirehole")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem