{
  "id": "dns-stack",
  "name": "DNS Stack",
  "requires_stable_ip": true,
  "firewall_ports": [53, 8089, 8489],
  "firewall_enable": true,
  "services": [
    { "name": "Pi-hole", "port": 8489, "scheme": "https", "path": "/admin/" }
  ],
  "actions": [
    {
      "type": "tls_bundle",
      "source_cert": "/etc/pikit/certs/pikit.local.crt",
      "source_key": "/etc/pikit/certs/pikit.local.key",
      "dest": "/etc/pihole/tls.pem",
      "owner": "root:pihole",
      "mode": "640",
      "restart": "pihole-FTL"
    },
    {
      "type": "replace_text",
      "file": "/etc/pihole/pihole.toml",
      "match": "domain = \"pi.hole\"",
      "replace": "domain = \"pikit.local\"",
      "restart": "pihole-FTL"
    }
  ]
}