Messages

I have a Protectli VP2430 with coreboot that would just skip the flash, complaining about a secure boot certificate. Adding

Code Select Expand

-AllowMissingCert to the command allowed it to continue.

I'm new to opnsense, so bear that in mind, but I recently got this setup with the adguard extention.

It looks like you are trying to bind both unbound and adguard to port 53, which is why it isn't starting? IIRC you can't have two services with the same port. The adguard plugin doesn't appear to have a way to change the port from the GUI but unbound and dnsmasq do (General - Listen port).

I have Adguard on port 53, unbound set to 65353, and dnsmasq set to 65354. The only entries in my adguard for DNS are 127.0.0.1:65353

So the requests hit adguard on 53, get filtered, get sent to unbound, at which point they either sent on for DNS over TLS, or if they are internal - sent via query forwarding to dnsmasq.

Specific instructions for the query forward and dns over TLS are here: https://docs.opnsense.org/manual/dnsmasq.html