Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/oijkn/adguardhome-doh-dot
Official AdGuarHome docker with both DoH (DNS over HTTPS) and DoT (DNS over TLS) clients. Don't browse the Internet insecurely by sending your DNS requests in clear text !
https://github.com/oijkn/adguardhome-doh-dot
adblocker adguard-home adguardhome cloudflare dns dns-over-https dns-over-tls docker docker-compose network privacy raspberry-pi security stubby unbound
Last synced: 5 days ago
JSON representation
Official AdGuarHome docker with both DoH (DNS over HTTPS) and DoT (DNS over TLS) clients. Don't browse the Internet insecurely by sending your DNS requests in clear text !
- Host: GitHub
- URL: https://github.com/oijkn/adguardhome-doh-dot
- Owner: oijkn
- License: gpl-3.0
- Created: 2022-05-23T15:47:01.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2022-06-01T19:27:22.000Z (over 2 years ago)
- Last Synced: 2024-11-02T13:50:25.197Z (12 days ago)
- Topics: adblocker, adguard-home, adguardhome, cloudflare, dns, dns-over-https, dns-over-tls, docker, docker-compose, network, privacy, raspberry-pi, security, stubby, unbound
- Language: Dockerfile
- Homepage:
- Size: 45.9 KB
- Stars: 16
- Watchers: 2
- Forks: 5
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Welcome to AdGuardHome DoH/DoT !
## 💻 Introduction
- Official **AdGuardHome Docker** with both **DoH** (DNS over HTTPS) and **DoT** (DNS over TLS) clients.
Don't browse the Internet insecurely by sending your DNS requests in clear text !
- Special thanks to [Trinib](https://github.com/trinib/AdGuard-WireGuard-Unbound-Cloudflare) for his amazing work on [AdGuard-WireGuard-Unbound-Cloudflare](https://github.com/trinib/AdGuard-WireGuard-Unbound-Cloudflare/blob/main/README.md) .
- Image built for Raspberry Pi (arm32/v7,arm64,amd64).
## 🚀 Installation
**_Don't forget to replace `` to your docker data directory._**
**1. Edit docker-compose.yml file**
-
- Replace `` to your docker data directory.
- Replace `192.168.1.110` IP address to your AdGuardHome server IP address.
- Replace `192.168.1.0/24` subnet to your network subnet.
- Replace `192.168.1.1` gateway to your network gateway.
- Replace `192.168.1.100/28` subnet to your macvlan subnet.
- Replace `192.168.1.100` IP address to your host IP address.
- Replace `eth0` to your network interface name.
```dockerfile
version: "2" # Docker Compose version for Portainer
services:
adguardhome:
image: oijkn/adguardhome-doh-dot:latest
container_name: adguardhome
hostname: rpi-adguard
environment:
- PUID=1000 # User ID (UID)
- PGID=100 # Group ID (GID)
- TZ=Europe/Paris # Timezone
volumes:
- /adguardhome/conf:/opt/adguardhome/conf
- /adguardhome/work:/opt/adguardhome/work
cap_add:
- NET_ADMIN
networks:
macvlan0:
ipv4_address: 192.168.1.110 # IP of the container for AdGuardHome
restart: unless-stopped
networks:
macvlan0:
driver: macvlan
driver_opts:
parent: eth0 # Parent interface, configure it depending on your interface name
ipam:
config:
- subnet: 192.168.1.0/24 # Subnet of the container
gateway: 192.168.1.1 # Gateway of the network
ip_range: 192.168.1.100/28 # Usable Host IP Range: 192.168.1.97 - 192.168.1.110
aux_addresses:
rpi-srv: 192.168.1.100 # Reserved for RPi Server (IP of the host)
```
**2. Configure the network interface**
- Depending on your network interface name and OS, you may need to configure the network interface of the host to use the macvlan0 network (same subnet, same gateway, same IP for the container etc...).
- For `macvlan-shim` IP, you must attribute one IP from the range of macvlan subnet
````shell
# Ethernet interface (eth0)
allow-hotplug eth0
iface eth0 inet static
address 192.168.1.100
netmask 255.255.255.0
gateway 192.168.1.1
dns-nameservers 192.168.1.110
# create a new network macvlan interface on top of eth0
pre-up ip link add macvlan-shim link eth0 type macvlan mode bridge
# assign an IP and the network space to the new network interface
pre-up ip addr add 192.168.1.99/32 dev macvlan-shim
# bring up the new network interface
up ip link set macvlan-shim up
# add a route to the container
post-up ip route add 192.168.1.110/32 dev macvlan-shim
````
**3. Configure the DNS resolver**
- You must configure the new `nameserver` of your host.
Edit the file `/etc/resolv.conf` as below :
```
nameserver 192.168.1.110 # AdGuardHome server IP address
```
## ☕ How to use it ?
- After configuring the docker-compose.yml file, you have to start the containers with: `docker-compose up -d`
- Then, you can access the AdGuardHome web interface at: `http://:3000/`
- `IMPORTANT`: In Listen Interfaces option choose `eth0` (or another name, it depends on your system) and select next
- Set up `username` & `password` and then login admin panel (port :80)
- `IMPORTANT`: In general settings, set "Query logs retention" to 24 hours. (I read that for some people logs fill up which slows down Pi and needing a reboot)
- In AdGuard homepage under settings, select "DNS settings"
- Delete everything from both _**Upstream**_ and _**Bootstrap DNS**_ server options and add the following for:
- DNS over TLS (Unbound) : `127.0.0.1:53`
- DNS over HTTPS/Oblivious DNS over HTTPS : `127.0.0.1:5053` (Cloudflared tunnel)
- TLS forwarder (Stubby) : `127.0.0.1:8053`
- `IMPORTANT:` Check "Parallel Request" option for DNS resolvers to work simultaneously.
- Then in DNS setting look for DNS cache configuration section and set cache size to 0 (caching is already handled by Unbound) and click apply.
- Click apply and test upstreams
## 📝 Notes
- DoH service (Cloudflared) runs at 127.0.0.1#853.
- DoT service (Stubby) runs at 127.0.0.1#8053.
- DoH & DoT Uses cloudflare (1.1.1.1 / 1.0.0.1) by default
## 📫 Credits
- Trinib for the global configuration [AdGuard-WireGuard-Unbound-Cloudflare](https://github.com/trinib/AdGuard-WireGuard-Unbound-Cloudflare)
- [Cloudflared](https://developers.cloudflare.com/)
- [DNS Privacy Stubby resolver](https://github.com/getdnsapi/stubby)
- [Unbound DNS](https://unbound.net/)
- [AdGuardHome](https://github.com/AdguardTeam/AdGuardHome/blob/master/README.md)
## ✍️ User Feedback
If you have any problems with or questions about this image, please contact me through a [GitHub issue](https://github.com/oijkn/adguardhome-doh-dot/issues).