add strong password

ansible/carwash.yml

@@ -28,8 +28,8 @@
         src: resolv.conf
         dest: /etc/resolv.conf
     - name: Copy pi-hole docker compose
-      copy:
-        src: docker-compose.yml
+      template:
+        src: docker-compose.yml.j2
         dest: /root/docker-compose.yml
     - name: Start pi-hole
       docker_compose:

ansible/docker-compose.yml.j2

@@ -1,3 +1,4 @@
+# vi: ft=yaml
 version: "3"
 
 services:
@@ -7,11 +8,12 @@ services:
     network_mode: "host"
     environment:
       TZ: 'Europe/Amsterdam'
-      WEBPASSWORD: 'admin'
+      WEBPASSWORD: {{ pihole_password }}
       PIHOLE_DNS_: '192.168.30.1'
       INTERFACE: wg0
       DNSMASQ_LISTENING: single
       WEB_BIND_ADDR: 192.168.30.128
+      FTLCONF_LOCAL_IPV4: 192.168.30.128
     volumes:
       - /mnt/data/pihole:/etc/pihole
       - /mnt/data/dnsmasq:/etc/dnsmasq.d

ansible/inventory/host_vars/carwash.yml

@@ -14,3 +14,12 @@ wireguard_unmanaged_peers:
   pim:
     public_key: "xQ1hkwpIf5x7Wkx1leQHXx3RK8fjGWt2ZmG9XUN3V08="
     allowed_ips: "192.168.30.129/32"
+
+pihole_password: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  64303162663232623966316566333532633666373431323930363661383763666138393034373566
+  6239326365643861653038623231316566373761336535360a623564346531636361353762383331
+  65613634616439303339313436306435313532353464313635613564313030666466323735356665
+  6164383638336232630a323164626530623838386132393737353366646135313635626633343466
+  30383338303939343235653061633263353761376162353932323738633066636362303261343130
+  6366353433636131303365383963323565306139653534383632

ansible/pihole_password

@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+64303162663232623966316566333532633666373431323930363661383763666138393034373566
+6239326365643861653038623231316566373761336535360a623564346531636361353762383331
+65613634616439303339313436306435313532353464313635613564313030666466323735356665
+6164383638336232630a323164626530623838386132393737353366646135313635626633343466
+30383338303939343235653061633263353761376162353932323738633066636362303261343130
+6366353433636131303365383963323565306139653534383632