Mark Drobnak

The main directories to remove are: ``` /etc/.pihole /etc/pihole /opt/pihole /var/www/html/admin ``` But the uninstall script is the source of truth in what should get uninstalled: https://github.com/pi-hole/pi-hole/blob/master/automated%20install/uninstall.sh

Yes, none of those files are created by us directly.

Pi-hole needs sudo in order to restart the `dnsmasq` service. The web interface is only given sudo access to `pihole` commands, so it can not run any code other than...

The wrapper would still need `pihole` sudo access.

The wrapper that you mention IS the `pihole` command. Further separating the dnsmasq restart functionality from the application logic would not be much help either. Either way, the web interface...

The web server does run unprivileged after it binds the port. It does need port 80 though, because that is the port which ads hit (impossible to change with just...

FTLDNS runs unprivileged except for some capabilities (to bind to port 53, handle DHCP, etc): https://docs.pi-hole.net/ftldns/in-depth/#linux-capabilities Also, the new web interface and API should be able to run mostly or...

@ChristopherKing42 That is one of the reasons we are working on a new web interface and API: https://pi-hole.net/2018/10/15/announcing-our-restful-api-contributions-welcome/ https://pi-hole.net/2018/01/13/pi-hole-web-interface-the-next-generation/

> Working on an idea of this and was curious, is there a reason the screens are wrapped in a `RefCell` within the `gfx` module? There's some context here: https://github.com/Meziu/ctru-rs/pull/22...

> Also something to consider is using something like `num_enum` for non-bitflag enums. I think it would help a lot with removing all the `From` implementation boilerplate. I didn't want...