dlx-ansible/host_vars/pihole.yml

---
# Pi-hole specific variables

common_firewall_allowed_ports:
  - "22/tcp"    # SSH
  - "53/tcp"    # DNS
  - "53/udp"    # DNS
  - "80/tcp"    # Web admin
  - "443/tcp"   # HTTPS (optional)