Guides / Wiki

Adguard

A containerized, high-performance AdGuard Home network-wide ad and tracker blocker deployed in the homelab. Features upstream DNS routing directly to a local Unbound recursive resolver, custom client identification rules, safe search enforcement, and comprehensive query logging for local network telemetry.

Click here

Unbound

A production-grade, hardened Unbound recursive DNS resolver built for my home lab. Features DNS-over-TLS (DoT) forwarding to Quad9, local zone forwarding for .homelab domains, aggressive caching optimization, and automated monthly root-hints updates via cron.

Click here

Bind

A robust, standards-compliant BIND 9 DNS server configured for enterprise-grade name resolution and zone management. Features authoritative serving for local zones, secure zone transfers (AXFR/IXFR) with TSIG authentication, DNSSEC validation, and fine-tuned access control lists (ACLs) to manage recursive query queries securely across the local infrastructure.

Click here