i am running *arr apps on a pi, using tailscale with mullvad exit nodes as a VPN, how do i add adguardhome or pihole to the stack without screwing everything up? (sh.itjust.works)

submitted 9 months ago* (last edited 9 months ago) by funkless_eck@sh.itjust.works to c/selfhosted@lemmy.world

8 comments fedilink hide all child comments

-all *arr apps in docker containers using docker compose -tailscale has friendly tailnet name -...magicdns enabled -...global nameservers have mullvad public dns in them

not very confident here, can I just follow this guide (link: https://tailscale.com/kb/1114/pi-hole/) and it works or do I need to change some settings? I notice it tells me to add a custom DNS but mullvad is already in there? how does it know which to use or in which order?

you are viewing a single comment's thread
view the rest of the comments

[-] dan@upvote.au 3 points 9 months ago* (last edited 9 months ago)

You can most likely leave the DNS server of mullvad as second priority so you have a backup if your AdGuard container is not reachable

That's not really how DNS works. If you have two DNS servers configured, the OS will usually do either one of two things:

Balance the requests between them; or
Send the request to both servers and use the one that replied faster

If you mix Mullvad and AdGuardHome DNS servers, you'll very likely end up with a mix of both being used. The DNS servers configured on your clients should either be all AdGuardHome or all Mullvad so that you don't confuse yourself ("why are some ads blocked but not others??") :)

If you want to continue using Mullvad's DNS servers, that's fine, but you'd set them as upstream servers in AdGuardHome, and then configure all devices to use the AdGuardHome DNS. Ideally use their DNS servers using DNS-over-HTTPS or DNS-over-TLS: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls

[-] Petter1@lemm.ee 1 points 9 months ago* (last edited 9 months ago)

😮really, that would be really not intuitive design, have to check this on my OpnSense, in that case

But generally, ads are always blocked, tho.

Edit: See pic for how tailscale describes it:

I understand it so, that your DHCP (your tailscale and for me OpnSense) will give the complete DNS list to devices, and those decide how to handle DNS lookups and may prefer mullvard prior AdGuard and thus will show ads. If that happen, you have to disable mulvards DNS server by removing it from the list.

[-] dan@upvote.au 3 points 9 months ago

You got it. :)

I'd recommend running two AdGuard Home servers on two different devices, and keeping them in sync with AdGuardHome-Sync. That's useful because if you ever have to reboot one of them, the internet won't break.

this post was submitted on 01 Feb 2024

18 points (80.0% liked)

Selfhosted

39980 readers

394 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz