-all *arr apps in docker containers using docker compose
-tailscale has friendly tailnet name
-…magicdns enabled
-…global nameservers have mullvad public dns in them
not very confident here, can I just follow this guide (link: https://tailscale.com/kb/1114/pi-hole/) and it works or do I need to change some settings? I notice it tells me to add a custom DNS but mullvad is already in there? how does it know which to use or in which order?
You can most likely leave the DNS server of mullvad as second priority so you have a backup if your AdGuard container is not reachable
That’s not really how DNS works. If you have two DNS servers configured, the OS will usually do either one of two things:
Balance the requests between them; or
Send the request to both servers and use the one that replied faster
If you mix Mullvad and AdGuardHome DNS servers, you’ll very likely end up with a mix of both being used. The DNS servers configured on your clients should either be all AdGuardHome or all Mullvad so that you don’t confuse yourself (“why are some ads blocked but not others??”) :)
If you want to continue using Mullvad’s DNS servers, that’s fine, but you’d set them as upstream servers in AdGuardHome, and then configure all devices to use the AdGuardHome DNS. Ideally use their DNS servers using DNS-over-HTTPS or DNS-over-TLS: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
😮really, that would be really not intuitive design, have to check this on my OpnSense, in that case
But generally, ads are always blocked, tho.
Edit: See pic for how tailscale describes it:
I understand it so, that your DHCP (your tailscale and for me OpnSense) will give the complete DNS list to devices, and those decide how to handle DNS lookups and may prefer mullvard prior AdGuard and thus will show ads. If that happen, you have to disable mulvards DNS server by removing it from the list.
I’d recommend running two AdGuard Home servers on two different devices, and keeping them in sync with AdGuardHome-Sync. That’s useful because if you ever have to reboot one of them, the internet won’t break.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
Setup pihole in a docker container.
Or use this as an “excuse” to buy another Pi. ;-)
wouldn’t the second pi have to be linked to the first?
Yes.
Gravity-sync to the rescue!
https://github.com/vmstan/gravity-sync
I would install AdGuard as docker container and set the IP with which this Container is reachable as Nameserver (DNS) in tailscail
You can most likely leave the DNS server of mullvad as second priority so you have a backup if your AdGuard container is not reachable
But im just a noob with a sysadmin friend, lol
That’s not really how DNS works. If you have two DNS servers configured, the OS will usually do either one of two things:
If you mix Mullvad and AdGuardHome DNS servers, you’ll very likely end up with a mix of both being used. The DNS servers configured on your clients should either be all AdGuardHome or all Mullvad so that you don’t confuse yourself (“why are some ads blocked but not others??”) :)
If you want to continue using Mullvad’s DNS servers, that’s fine, but you’d set them as upstream servers in AdGuardHome, and then configure all devices to use the AdGuardHome DNS. Ideally use their DNS servers using DNS-over-HTTPS or DNS-over-TLS: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls
😮really, that would be really not intuitive design, have to check this on my OpnSense, in that case
But generally, ads are always blocked, tho.
Edit: See pic for how tailscale describes it:
I understand it so, that your DHCP (your tailscale and for me OpnSense) will give the complete DNS list to devices, and those decide how to handle DNS lookups and may prefer mullvard prior AdGuard and thus will show ads. If that happen, you have to disable mulvards DNS server by removing it from the list.
You got it. :)
I’d recommend running two AdGuard Home servers on two different devices, and keeping them in sync with AdGuardHome-Sync. That’s useful because if you ever have to reboot one of them, the internet won’t break.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
4 acronyms in this thread; the most compressed thread commented on today has 7 acronyms.
[Thread #475 for this sub, first seen 2nd Feb 2024, 13:25] [FAQ] [Full list] [Contact] [Source code]