AdGuard Home: Network-wide Control

The Filter

AdGuard Home is my primary DNS server. It sits behind Traefik but handles all local DNS resolution. Its main job is to kill trackers and ads before they even hit my devices, and it does it very well without any noticeable lag on the J4105.

Redacted Config

Here is how I have it set up in the stack. I use a dedicated network for proxying.

services:
  adguard:
    image: adguard/adguardhome:latest
    container_name: adguard
    restart: unless-stopped
    volumes:
      - ./work:/opt/adguardhome/work
      - ./conf:/opt/adguardhome/conf
    ports:
      - 53:53/tcp
      - 53:53/udp

Why it's useful

1. DNS-over-HTTPS: I use AdGuard to force encrypted DNS queries to upstream providers like Cloudflare or Quad9.
2. Local Overrides: I map all my internal subdomains (like ha.home.websters.at) directly to the local IP of the server, so traffic never even leaves the house.
3. Parental/Security Filters: It automatically blocks known malicious domains from the OISD list and others.