diff --git a/homelab/server/config/pihole/.env b/homelab/server/config/pihole/.env
new file mode 100644
index 00000000..13a86856
--- /dev/null
+++ b/homelab/server/config/pihole/.env
@@ -0,0 +1,28 @@
+## Generic
+TZ=America/Los_Angeles # used by most images
+PUID=1000 # used by LSIO images
+PGID=1000 # used by LSIO images
+ADMIN_EMAIL=joey@jafner.net
+
+## Container volume mapping
+DOCKER_DATA=/home/joey/data/pihole
+# DOCKER_DATA=/mnt/md0/<service> # for services whose internal data may be large (e.g. modded minecraft servers with large world files)
+DOCKER_CONFIG=/home/joey/homelab/server/config/<service>/config 
+
+## Additional volume mapping
+MEDIA_DIR=/mnt/nas/media
+VIDEO_DIR=/mnt/nas/media/Video
+MOVIE_DIR=/mnt/nas/media/Video/Movies
+SHOWS_DIR=/mnt/nas/media/Video/Shows
+BOOKS_DIR=/mnt/nas/calibre
+MUSIC_DIR=/mnt/nas/media/Audio/Music
+DOWNLOAD_DIR=/mnt/nas/torrenting/<service|tracker> # e.g. /mnt/nas/torrenting/GGN or /mnt/nas/torrenting/jdownloader2
+
+## SMTP Config
+SMTP_HOST=smtp.gmail.com
+SMTP_PORT=465
+SMTP_USER=noreply@jafner.net
+SMTP_PASS=
+SMTP_SSL=true
+SMTP_TLS=false
+## Configure client to use SSL, not TLS
\ No newline at end of file
diff --git a/homelab/server/config/pihole/docker-compose.yml b/homelab/server/config/pihole/docker-compose.yml
new file mode 100644
index 00000000..646a538a
--- /dev/null
+++ b/homelab/server/config/pihole/docker-compose.yml
@@ -0,0 +1,33 @@
+version: '3'
+services:
+  pihole:
+    image: 
+    container_name: pihole_pihole
+    logging:
+      driver: loki
+      options:
+        loki-url: http://localhost:3100/loki/api/v1/push
+        loki-batch-size: "50"
+        loki-retries: "1"
+        loki-timeout: "2s"
+    user: "1000:1000"
+    restart: "no"
+    environment:
+      PUID: ${PUID}
+      PGID: ${PGID}
+    volumes:
+      - ${DOCKER_DATA}/pihole:/etc/pihole
+      - ${DOCKER_DATA}/dnsmasq:/etc/dnsmasq.d
+    labels:
+      - traefik.http.routers.pihole.rule=Host(`pihole.jafner.net`)
+      - traefik.http.routers.pihole.tls.certresolver=lets-encrypt
+      - traefik.http.routers.pihole.middlewares=lan-only@file
+      - traefik.http.services.pihole.loadbalancer.server.port=80
+    networks:
+      - web
+    ports:
+      - "53:53/tcp"
+      - "53:53/udp"
+networks:
+  web:
+    external: true
\ No newline at end of file