AdGuard Home setup guide

[depc80]

I run into an issue where I have to create rule to allow access to adguard dashboard or pretty any dashboard.

[iammike]

I think I need to reinstall my OpnSense Router

What is the best way to backup and restore AdGuard?

[RamSense]

way to backup and restore AdGuard?

I would say, backup the AdGuardHome.yaml file and restore it after new installation. location:
/usr/local/AdGuardHome

[depc80]

I tried getting wireguard working while using Adguard and ran into issue where it didn't get any handshake if I use custom domain on Cloudflare. So eventually I found that I need to create another A record like vpn.domain_name.tld on Cloudflare and disable proxy. Then add vpn.domain_name.tld to Wireguard app - Endpoint. The rest are just as same as homenetworkguy's wireguard configuration guide.

I also found that in order to get enable encryption mode working, the correct path to  the full chain certs and cert key are conveniently found in Service - ACME clients - Log file - ACME.log. In my case it's

Code: [Select]

/var/etc/acme-client/home/*.domain_name.tld_ecc/fullchain.cer and

Code: [Select]

/var/etc/acme-client/home/*.domain_name.tld_ecc/*.domain_name.tld.key

[iammike]

way to backup and restore AdGuard?

I would say, backup the AdGuardHome.yaml file and restore it after new installation. location:
/usr/local/AdGuardHome

Yes works.

In case someone else wants to do it here the steps I did (ps: This is on a new device)
(first of all make a backup of /usr/local/AdGuardHome )

1- installed and updated OpnSense
2- added the mimugmail.conf to /usr/local/etc/pkg/repos
3- did a pkg update
4- installed Adguard Home
5- Started Adguard, and followed the wizard
6- Stopped Adguard (under services)
7- copied the whole directory (which I saved earlier) over the new install of adguard
8- Started Adguard

After that Adguard was running with the same settings / block lists as on the old device.

Hope it helps someone

[Inxsible]

Is there a way to allow the web interface for AdGuardHome to be available on multiple interfaces but not all ?

Initially, I set it up on ALL interfaces and the yaml file used 0.0.0.0.

Code: [Select]

http:
      address:0.0.0.0:8080

I have 5 separate VLANs and I have since changed the bind_hosts to stop listening on all interfaces and only enabled it on 4 of my VLANs. I would like to do the same to the web interface but I was looking to see what format I can use to do that

The following allows access on VLAN 1, but I would also like access on VLAN 7 and VLAN 10

Code: [Select]

http:
      address:192.168.1.1:8080

I tried the following three formats, but then AdguardHome failed to start up.

Code: [Select]

http:
      address:192.168.1.1:8080
      address:192.168.7.1:8080
      address:192.168.10.1:8080


Code: [Select]

http:
      address:192.168.1.1:8080, 192.168.7.1:8080, 192.168.10.1:8080


Code: [Select]

http:
      address:
            - 192.168.1.1:8080
            - 192.168.7.1:8080
            - 192.168.10.1:8080

None of the above format worked for me and googling doesn't provide relevant results and I was hoping if someone could tell me what format to use

EDIT: Weirdly, when I remove 0.0.0.0 from the bind_hosts, my OpnSense firmware updates start timing out. I can still access the internet just fine, but the Opnsense updates keep failing.

So should AdGuardHome be listening on ALL interfaces by default for dns: bind_hosts? Seems strange that only the OpnSense updates should fail while the internet is still accessible!!

[everydaydealer]

All, i did setup my AdGuard in Opnsense. But no statistics shows up in the dashboard. all are 0s

followed this post

https://forum.opnsense.org/index.php?topic=22162.msg146626#msg146626

Except.. i kept the unbound DNS port to be 53 (default). Changing this to anything else, im not getting internet.

kept adguard listen port to be 5353. So modified the DNS entries in adguard accordingly


DNSleak test shows cloudfare correctly. im not sure if traffic is going through Adguard or not

[9axqe]

Just did the manual upgrade and all works fine.

I'm thinking about upgrading manually using the AdGuard Home GUI, but if the package is upgraded in the mimugmail repo, won't it then potentially **downgrade** the AdGuard Home? This would represent a high risk of breaking things in my view.

[9axqe]

Is there a reason to keep Unbound enabled when using AdGuard Home?

Configuring Unbound as upstream DNS in adguard fixes one issue for me, which is that AGH won't start if internet is down.

Unbound is also able to do recursive DNS resolution, which some consider better from a privacy point of view (no one has all your DNS lookups, they are spread, but on the downsides lookups are in clear text).

[Limete]

I have everything set up and it's working fine, but with one caveat. My OPNSense box isn't able to get software updates and ping also does not work. Any device connected to the network can access the internet and resolve addresses just fine, except for the router itself.

I have Unbound turned off in the settings. In AGH I have the boxes checked for Primary and Enable DNS.

Under System: Settings: General I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

Under Services: DHCPv4: [LAN] I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

[yeraycito]

I have everything set up and it's working fine, but with one caveat. My OPNSense box isn't able to get software updates and ping also does not work. Any device connected to the network can access the internet and resolve addresses just fine, except for the router itself.

I have Unbound turned off in the settings. In AGH I have the boxes checked for Primary and Enable DNS.

Under System: Settings: General I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

Under Services: DHCPv4: [LAN] I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

If you don't use Unbound it is because you have the DNS set directly in Adguard and that is enough. What you do need to check is this:

3 - Opnsense - System - Settings -General

      DNS Servers: empty

      Untick: Do not use the local DNS service as a nameserver for this system

      Untick: Allow DNS server list to be overridden by DHCP/PPP on WAN

https://forum.opnsense.org/index.php?topic=22162.msg146626#msg146626

[Limete]

I have everything set up and it's working fine, but with one caveat. My OPNSense box isn't able to get software updates and ping also does not work. Any device connected to the network can access the internet and resolve addresses just fine, except for the router itself.

I have Unbound turned off in the settings. In AGH I have the boxes checked for Primary and Enable DNS.

Under System: Settings: General I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

Under Services: DHCPv4: [LAN] I have nothing listed under DNS Servers. Should I add my OPNSense box IP address here?

If you don't use Unbound it is because you have the DNS set directly in Adguard and that is enough. What you do need to check is this:

3 - Opnsense - System - Settings -General

      DNS Servers: empty

      Untick: Do not use the local DNS service as a nameserver for this system

      Untick: Allow DNS server list to be overridden by DHCP/PPP on WAN

https://forum.opnsense.org/index.php?topic=22162.msg146626#msg146626

I verified that those settings are already in place. Could it be the WAN interface not being selected during the setup? I can't remember if I did that or not.

[Duka]

Hi to everyone.

I have AdGuard installed as plugin on Opnsense. And i have set Private reverse DNS servers to UnboundDns on Opnsese. And i have hostnames but with OPNsense domain.

Is it possible to exclude that domain, just to get hostnames?

[Salted11]

Good day, I'm running OPNSense with the adguard plugin configured to integrate unbound, using this walkthrough: https://samuelsson.dev/install-adguard-home-on-an-opnsense-router/.

I'm also using an unRAID server, with SWAG as a reverse proxy. I've setup a nextcloud container according to Spaceinvaderone's tutorial: https://youtu.be/id4GcVZ5qBA?si=rgoe3g4jHB64aCNY.

I have established overrides for these subdomains in Unbound.  Prior to adding adguard, everything worked.
With adguard running, everything appears to be working fine, except access to my subdomains from my own LAN.  I can access my subdomain (nextcloud.mydomain.com) when I'm outside the network but anytime I try to access it through my LAN, I get a "404 Not Found, nginx" page. I've seen options to configure Adguard with blocklist custom rules (e.g. 192.168.1.10 nextcloud.mydomain.com) or with upstream DNS additions (e.g. [nextcloud.mydomain.com/]192.168.1.10) Neither of these options seem to work (although I may have misconfigured them).

Does anyone have a similar setup? Is this an adguard configuration issue or do I need to tweak Swag?

Thanks for your time.

[emmitt]

Hej,
I would like to know how exactly forcing "safe search" works. Doesn't this require breaking the SSL connection?
Can someone please explain this to me?
Greatz Emmitt