terraform {
  required_providers {
    pihole = {
      source  = "dklesev/pihole"
      version = "~> 1.0"
    }
  }
}

provider "pihole" {
  url      = "http://pi.hole"      # or PIHOLE_URL env var
  password = "your-password"        # or PIHOLE_PASSWORD env var (recommended)
  
  # Optional settings
  timeout                  = 30     # HTTP timeout in seconds
  tls_insecure_skip_verify = false  # Skip TLS certificate verification
}

resource "pihole_group" "trusted" {
  name        = "trusted_devices"
  description = "Devices with relaxed blocking"
}

resource "pihole_client" "laptop" {
  client  = "192.168.1.100"
  groups  = [pihole_group.trusted.id]
  comment = "My laptop"
}

resource "pihole_domain" "ads" {
  domain = "ads.example.com"
  type   = "deny"
  kind   = "exact"
}

resource "pihole_list" "blocklist" {
  address = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.txt"
  type    = "block"
}