# AdGuard Home

> Ad and tracker blocking DNS for your devices, never an open resolver.

AdGuard Home is a DNS server that blocks ads, trackers and malicious domains for every device that uses it. We install it with AdGuard's script to /opt/AdGuardHome as a systemd service, finish its first-run setup through its API, and allow only private, VPN (WireGuard and Tailscale) and loopback addresses to query it.

## Details

- Installs on: Ubuntu and Debian; AlmaLinux, Rocky Linux and Fedora
- Smallest plan: Budget (1 vCPU, 2 GB RAM)
- Public ports: 53/udp, 53/tcp, 80/tcp, 443/tcp
- Project site: https://github.com/AdguardTeam/AdGuardHome

## After the server is ready

1. From your computer, run `ssh -L 3000:127.0.0.1:3000 root@<your IPv4>`, open `http://localhost:3000` and log in as admin with the password from `cat /root/adguard-admin.txt`.
2. Choose how your devices reach it: over WireGuard or Tailscale (their addresses are already allowed), or add your home's IP address in Settings, DNS settings, Access settings.
3. For DNS-over-HTTPS, point a domain at the server, allow ports 80 and 443, run `vps9-https dns.example.com`, add a ClientID for each device to the allowed clients, and use https://dns.example.com/dns-query/<ClientID> on it.

## Questions

### Why doesn't it answer my DNS queries?

It only resolves for private, VPN and loopback addresses until you allow yours. Add your public IP address, or a ClientID for DNS-over-HTTPS, in Settings, DNS settings, Access settings. That keeps the server from being an open resolver that strangers can abuse.

### Can I use it with WireGuard or Tailscale?

Yes, and both address ranges are already allowed. A server gets one app, so add WireGuard by hand with our [WireGuard tutorial](https://vpsnine.com/tutorials/wireguard-vpn-server-ubuntu) and set the clients' DNS to 10.9.0.1, or put the server on Tailscale and point your tailnet's DNS at its Tailscale address.

### Does AdGuard Home log my lookups?

Its query log is on by default and stays on your server. Turn it off or shorten how long it keeps entries in Settings, General settings.

## Order it

Pick AdGuard Home in the order form, or use `"app": "adguard"` in the API or `vps9 servers create --app adguard`. See [all one-click apps](https://vpsnine.com/apps) and [plans](https://vpsnine.com/plans).
