Apps / Pi-hole
Managed Pi-hole hosting.
One server, no app limits.
Network-wide ad and tracker blocking. We pair it with WireGuard by default so it is never an open resolver.
What it is
Pi-hole is network-level ad and tracker blocking: a DNS sinkhole that filters junk for every device pointed at it, with a dashboard showing exactly what your network talks to.
Minimum RAM
1 GB
Fits on SC-1GB; SC-2GB is the comfortable pick with room to stack.
What we install
The playbook deploys the current Pi-hole with sensible blocklists, DNS locked to your addresses or your WireGuard tunnel rather than the open internet, HTTPS on the dashboard, and upstream resolvers of your choice.
What managed covers
Platform and server updates, daily snapshots plus dual offsite backups of configuration and lists, monitoring, and the managed firewall enforcing who may query it. Never an open resolver, by construction.
The app is $0. The managed server is the only bill, and everything above is part of it.
What does managed Pi-hole hosting include?
A Pi-hole that filters for your devices wherever they are, configured safely (open resolvers get abused within hours; ours are locked by the firewall), updated and backed up, for $0 on top of the server.
Why host Pi-hole on a VPS instead of a Raspberry Pi?
Because a VPS follows you: paired with WireGuard, your phone on mobile data gets the same filtering as your laptop at home, and there is no SD card to corrupt or home IP to depend on. The Pi stays a lovely toy; this is the always-on version.
How do my devices use it?
Through the tunnel, ideally: the WireGuard config hands out Pi-hole as DNS automatically, so connecting to the VPN is the whole setup. Fixed-IP locations like an office can be allow-listed directly in the firewall instead.
What does it actually block?
Ads, trackers, telemetry, and malware domains across every app on the device, not just browsers, which is the part browser extensions cannot reach. The query log shows the surprising truth about what your gadgets phone home to.
Stack it
Pi-hole runs well with.
Same server, no extra bill. These are the companions our team installs next to Pi-hole most often.
WireGuard
+1 GBThe modern VPN protocol, deployed with client configs ready to import and the tunnel verified working.
Uptime Kuma
+1 GBThe self-hosted uptime monitor everyone loves. Watch your sites from your own server.
Frequently asked questions
How much RAM does Pi-hole need?
1 GB is ample; DNS filtering is light work, which makes it a free-feeling addition to any stack.
Is an open resolver a risk?
Yes, a serious one, which is why ours never is: queries are limited to your tunnel or your named addresses at the firewall level.
Can I customize the lists?
Fully: add or remove blocklists, allow-list what breaks, and per-client rules through the dashboard. Backed up daily like everything else.
Sizing an app stack? The VPS sizing calculator recommends a plan from your apps and traffic, with the math shown.
Shared CPU servers
The right home for Pi-hole and most stacks: 3.0+ GHz vCPU, from $10/mo.
See Shared CPU →Dedicated CPU servers
For CPU-hungry stacks and busy databases: cores that are physically yours.
See Dedicated CPU →All plans and pricing
Every plan, both families, one honest price with everything included.
See pricing →Your server runs. You sleep.
Fully managed hosting from people who have been doing this since 2001.