v1.6.7: Bump Traefik & Pi-hole, fix DNS file permissions

What changed

• Traefik v3.0 → v3.6: Security patches and bug fixes. No breaking changes for Docker-based setups.
• Pi-hole 2025.11.1 → 2026.02.0: Two security fixes, faster startup, faster gravity updates.
• Fix DNS config file permissions (#9): Added chmod 644 to the LOCAL-DNS setup step so Pi-hole can read 02-local-dns.conf regardless of user or umask. Thanks @eren-kemer!
• Gitignore *.code-workspace files.

Upgrading

cd /volume1/docker/arr-stack
git pull

# Recreate with new images
docker compose -f docker-compose.arr-stack.yml -f docker-compose.traefik.yml -f docker-compose.utilities.yml pull traefik pihole
docker compose -f docker-compose.arr-stack.yml -f docker-compose.traefik.yml -f docker-compose.utilities.yml up -d traefik pihole

Traefik v3.6 note

If you use remote access with ACME/DNS challenge, update traefik/traefik.yml to fix a deprecation warning:

# Old
dnsChallenge:
  delayBeforeCheck: 10

# New
dnsChallenge:
  propagation:
    delayBeforeChecks: 10