AdGuard Home setup guide

[cookiemonster]

This quoted setup will work, the settings are a viable route to dns resolution.
Check and restart services or clients and diagnose on along the path.

[tiermutter]

I already heard that update to 107.31 makes AGH stopping. Solution was reinstalling AGH and restore configuration file from backup.

[yeraycito]

Two days ago version 0.107.30 was released, which has turned out to be buggy, yesterday version 0.107.31 was released, which fixes the bugs of the previous version and works great.

[yeraycito]

Free Android application to monitor and manage Adguard in Opnsense:

https://play.google.com/store/apps/details?id=com.jgeek00.adguard_home_manager

[Sbbh]

Can someone please explain how to make this work with multiple vlans? I have DNS working so far with Adguard and Unbound, but I'd like to forward all DNS traffic to Adguard.

If I simply create the NAT rules from here https://labzilla.io/blog/force-dns-pihole -- my vlan traffic can't access Adguard.

Do the vlans need to point to their respective gateway for DNS (opnsense IP)? Is there any way to avoid having a different DNS server IP for each vlan? I'm a bit lost..

[ChrisChros]

During setup of Adguard have you selected all networks including vlan's?
I have two port forward and one outbound rule to achieve what you want.

Within DHCP setup I have no specific DNS servers selected, this field is empty.

Additionaly I have for each Lan and vlan one rule to block all external DNS traffic on port 53 and allow only internal DNS traffic.

[Sbbh]

@ChrisChros, yep all networks are selected.

I'm guessing that everything in Adguard and Unbound is set up correctly, and I just need to create to correct rules in the firewall to forward all DNS traffic to Adguard and block everything else.

Does your DNS traffic stay within the lan/vlan? i.e. is the default DNS server the same as the gateway for each subnet? And are the portforward and outbound rules applied only to the LAN interface?

[ChrisChros]

@ChrisChros, yep all networks are selected.
Does your DNS traffic stay within the lan/vlan? i.e. is the default DNS server the same as the gateway for each subnet? And are the portforward and outbound rules applied only to the LAN interface?

DNS server is the same as the gateway for each subnet.
The Alias "local_Networks" include all subnets, Lan and vlan.

[Flyinace2000]

What does the "Primary DNS" tick box do?

[ChrisChros]

you have to enable this button, there was a problem in the past which has been discussed also here in the forum.
Can't explain the reason.

[huwylphi]

I already heard that update to 107.31 makes AGH stopping. Solution was reinstalling AGH and restore configuration file from backup.

Two days ago version 0.107.30 was released, which has turned out to be buggy, yesterday version 0.107.31 was released, which fixes the bugs of the previous version and works great.

I have opnsense v23.1.11 and AGH v0.107.32 and still have AGH that stops after a few hours / days.
In my setup I actually have 2 opnsense instances as master/backup (CARP) and it happens on both instance.
Also to mention, I use one docker container ghcr.io/bakito/adguardhome-sync for synchronizing the AGH configuration between both instances (each running on the master and backup opnsense instance). Maybe this is related somehow?
In my setup I also checked the new option "Primary DNS" since AGH is running on port 53 and Unbound DNS on another port.

Should I try what tiermutter suggested by reinstalling AGH and restore its configuration file from a backup?

Thanks for any advice.

Edit: I catch one time the moment when it crashes. It seems that the CPU consumption get very high:
https://drive.google.com/file/d/1Bq23bpAMBmBV8xU3hd_CZLb7Ck4pL0m6/view?usp=sharing

After killing the process with kill -9 74662 I could restart the AGH service and it runs again for some days (max 48h)

[Limete]

Is there a reason to keep Unbound enabled when using AdGuard Home? I turned mine off entirely and everything seems to be working fine.

Also, is there a way to get hostnames to appear in AGH rather than just IP?

[ChrisChros]

Also, is there a way to get hostnames to appear in AGH rather than just IP?
[/quote
you have to enter the IP address of your OPNsense box in the Bootstrap DNS-Server field.

[Flyinace2000]

Anyone update today from the web admin page, then have the service not be able to start?

*edit*
Ended up deleting the plug in and re-installing.

[huwylphi]

I already heard that update to 107.31 makes AGH stopping. Solution was reinstalling AGH and restore configuration file from backup.

Two days ago version 0.107.30 was released, which has turned out to be buggy, yesterday version 0.107.31 was released, which fixes the bugs of the previous version and works great.

I have opnsense v23.1.11 and AGH v0.107.32 and still have AGH that stops after a few hours / days.
In my setup I actually have 2 opnsense instances as master/backup (CARP) and it happens on both instance.
Also to mention, I use one docker container ghcr.io/bakito/adguardhome-sync for synchronizing the AGH configuration between both instances (each running on the master and backup opnsense instance). Maybe this is related somehow?
In my setup I also checked the new option "Primary DNS" since AGH is running on port 53 and Unbound DNS on another port.

Should I try what tiermutter suggested by reinstalling AGH and restore its configuration file from a backup?

Thanks for any advice.

Edit: I catch one time the moment when it crashes. It seems that the CPU consumption get very high:
https://drive.google.com/file/d/1Bq23bpAMBmBV8xU3hd_CZLb7Ck4pL0m6/view?usp=sharing

After killing the process with kill -9 74662 I could restart the AGH service and it runs again for some days (max 48h)

Update: since updating to AGH v0.107.34, the crashes on both opnsense instances are gone.