try cname

system/services/containers/pihole/default.nix

@@ -68,12 +68,19 @@
                         ];
 
                         settings = {
-                            dns.upstreams = [ 
+                            dns = {
+                                upstreams = [ 
                                     #"127.0.0.1#5335"
                                     "1.0.0.1"
                                     "1.1.1.1"
                                 ];
 
+                                cnameRecords = [
+                                    "traefik.local,local.internal.esotericbytes.com"
+                                    "hass.local,local.internal.esotericbytes.com"
+                                ];
+                            };
+
                             misc.dnsmasq_lines = [ "except-interface=nonexisting" ];
                         };
                     };
@@ -126,7 +133,8 @@
                 };
 
                 networking = {
-                    firewall.allowedTCPPorts = [ 22 ];
+                    firewall.allowedTCPPorts = [ 22 5335 ];
+                    firewall.allowedUDPPorts = [ 5335 ];
                     #nameservers = [ "1.1.1.1" "1.0.0.1" ];
                 };