Login

r/AdGuardHome

Permission error when installing Adguard Home
▲ 1 r/AdGuardHome+1 crossposts

Permission error when installing Adguard Home

I'm trying to install Adguard Home with the Netbird guide. I begin with the following in /home/MYUSERNAME/

mkdir -p ~/adguardhome && cd ~/adguardhome
nano docker-compose.yml

In my yaml file, I insert the following which is slightly modified from the Netbird guide's text

services:
adguardhome:
image: adguard/adguardhome:latest
container_name: adguardhome
restart: unless-stopped
volumes:
- ./adguard/workdir:/opt/adguardhome/work
- ./adguard/confdir:/opt/adguardhome/conf
ports:
- "10.0.0.XX:53:53/tcp"   # the "XX" part is my server's ip
- "10.0.0.XX:53:53/udp"
- "10.0.0.XX:3003:3003/tcp"   # the original port is 3000 but Dockhand uses that already
- "10.0.0.XX:8080:80/tcp"
cap_add:
- NET_ADMIN

I'm using Dockhand here so I go into Stacks, then create, then select my yaml file, and deploy. Here are where the errors start in the logs.

[adguardhome][info] starting adguard home version="AdGuard Home, version v0.107.74"
[adguardhome][info] this is the first time adguard home has been launched
[adguardhome][info] checking if adguard home has the necessary permissions
[adguardhome][info] adguard home can bind to port 53
[adguardhome][info] dhcpd: warning: creating dhcpv4 server err="dhcpv4: invalid IP is not an IPv4 address"
[adguardhome][info] tls_manager: using default ciphers
[adguardhome][info] webapi: initializing
[adguardhome][info] webapi: This is the first launch of AdGuard Home, redirecting everything to /install.html
[adguardhome][info] permcheck: warning: found unexpected permissions type=directory path=/opt/adguardhome/work perm=0755 want=0700
[adguardhome][info] webapi: AdGuard Home is available at the following addresses:
[adguardhome][info] go to http://127.0.0.1:3000
[adguardhome][info] go to http://[::1]:3000
[adguardhome][info] go to http://172.19.0.2:3000
[adguardhome][info] starting plain server server=plain addr=0.0.0.0:3000

Dockhand says that the container is running with a green dot but when I visit http:10.0.0.XX:3003, I am not able to connect to Adguard Home. Unsure what to do from here.

For what it's worth, here's the ownership and permission details when I do ls -l /home/MYUSERNAME/

drwxrwxr-x 3 MYUSERNAME docker 4096 May 10 18:31 adguardhome
drwxrwxr-x 3 MYUSERNAME docker 4096 May 10 15:35 dockhand

When I do -l /home/MYUSERNAME/adguardhome/ I get

drwxr-xr-x 4 root   root   4096 May 10 18:31 adguard
-rw-rw-r-- 1 MYUSERNAME docker  401 May 10 18:31 docker-compose.yml

When I do -l /home/MYUSERNAME/adguardhome/adguard I get

drwxr-xr-x 2 root root 4096 May 10 18:31 confdir
drwxr-xr-x 3 root root 4096 May 10 18:31 workdir
u/ausp1c1oushorse — 4 days ago
▲ 3 r/AdGuardHome

Unexpected delays in Safari browser due to DNS

I've been using AGH for nearly two years and sometimes experience weird delays with Apple Safari web browser, both on MacOS and mobile platforms. The AGH logs don't show the problem. Troubleshooting using nslookup or dig won't show the problem.

After two years, I finally discovered the root cause of the problem. A simple misconfiguration of Apple Safari will sneakily bypass your chosen DNS server.

There's an advanced setting in Safari called "used advanced tracking and fingerprinting protection" By default this setting is used only in Private Browsing mode. I had changed it to be used in All Browsing.

What does this setting do? It causes Safari to use Apple's own DNS servers over an encrypted channel, bypassing AGH.

More here: https://cleanbrowsing.org/support/troubleshooting/apple-screen-time

(The article is slightly dated, but the problem still exists in MacOS 26, iOS 26 an iPadOS 26.

I discovered the problem quite by accident. I clicked on a link that I absolutely knew should have been blocked by AGH. It was blocked in Vivaldi browser and blocked in DuckDuckGo browser, but it opened right up in Safari. After some troubleshooting and further investigation, I found the above article and sure enough that explained so many anomalies that were driving me crazy. After disabling that option, the problems have vanished.

I hope this helps someone else.

u/2112guy — 3 days ago
▲ 1 r/AdGuardHome

Is this normal? What do you recommend?

Im on a flint 2 with vanilla openwrt. The dashboard shows that it is blocking around 10%. I have HaGeZi's Pro list and Threat Intelligence.

mac ~ > dig googlesyndication.com +short
dig doubleclick.net +short
0.0.0.0
142.251.41.14

I'm getting lots of ad on recipe web pages.

reddit.com
u/mateyobi — 8 days ago
▲ 1 r/AdGuardHome

DNS for host os?

What's recommended for the host OS DNS server when the host is running AGH? Do you point it to AGH or to an upstream server?

reddit.com
u/2112guy — 6 days ago
▲ 1 r/AdGuardHome

Can Adguard Home block streaming service ads?

I've just finished setting up Adguard Home. I've verified that it's working and blocking ads. But I read conflicting things on how capable it is when it comes to blocking streaming ads.

Tubi is successfully blocked (of course the free one 😔), but the big names like Hulu and Netflix still pop up. However, Hulu ads are blocked in my web browser BUT not without enabling my Adguard extension, not from my current DNS set up and such.

As I said, I'm reading many conflicting things and I'm not overly tech savvy so after this project my brain is a bit fried and am just looking for a fairly straight forward answer on what I need to start working on or if I've done all I can lol.

reddit.com
u/zforce42 — 2 days ago
▲ 2 r/AdGuardHome

AdGuard Home or keep on each device?

Hey :)

First post here as am considering AdGuard Home. I'm buying my first home, in which I'll set up some things like HomeAssistant for automations and Frigate as an NVR on a N100 mini PC.

I've been using AdGuard on my devices for years, having lifetime licenses I purchased a long time ago. I'm now wondering if it's worth setting up AdGuard Home, whether it brings any advantages against using it per device and if there's any caveats to keep in consideration.

Any advice is appreciated.

reddit.com
u/carlosabia — 6 days ago
▲ 3 r/AdGuardHome

I have a Pi-Hole, I'm aware the challenge of blocking in feed, social media ads. Are there any lists that block some of these, or at least block the click thru attempt? She is looking for health cure-alls and keeps falling for snake oil products. Taking FB away from her isn't an option; we've tried.

I'm getting her a GL.iNet router with AdGuard. I can also put my ProtonVPN on it as well.

Thank you so much.

reddit.com
u/jtho78 — 11 days ago
▲ 8 r/AdGuardHome

Hey all I am fairly new to this and am having trouble understanding the differences between AdGuard Home, Pi-hole, and Technitium for privacy and ad blocking.

I originally stumbled across Pihole, and it seemed like a great idea. When I started looking into it, I found Adguard home and eventually Technitium as well and I am not sure what the differences are and which would be the best fit for me. Are they just different products that do the same thing or are there clear differences that can help me choose.

I have 2 Raspberry Pi 3B+s that I plan on using to host whichever I choose.
I have limited experience and I prefer something that is easier to set up and maintain.
There are kids that have access to the network so parental controls would be helpful.

Any advice, or things that I may have missed would be appreciated. Thanks

reddit.com
u/username_taker — 11 days ago
▲ 5 r/AdGuardHome

IPv6 dns question.

I recently upgraded the OS on my umbrel home and after restart i had network issues. Then i remembered i needed to update my IPv6 address on Lan DHCP server on my router. This got me to thinking. The devices on my network that support IPv6 have a local fe80: number and 2603:8080: number. I was using the 2603:8080: as the Lan DHCP ip server address but realized it often changes with other devices on my network but not my umbrel deivce. SO i started to use the fe80: one.

Should i have been using the fe80: one the whole time? Or should i go back to the 2603:8080: address? Both seem to work but since i only have 1 place to enter an IPv6 DNS on my router i have to choose one. I did some searching and found 1 thread from a year ago where someone said they were using the local v6 address which is the fe80. But i would like confirmation on that.

reddit.com
u/IAmSixNine — 6 days ago
▲ 3 r/AdGuardHome+1 crossposts

Penske Media Group owns most of the Hollywood trades, like Hollywood Reporter, Rolling Stone, and Variety. Of late, all those sites have managed to serve all their ad crap through my AdGuard defenses on all my devices.

I've actually bit a bit of a belt-and-suspenders things going, as I run AGH on a R-Pi for everything on my network, and AdGuard Mini as well on a couple of machines for localized blocking of elements on some specific websites.

Even if I activate every filter on the Mini machines, these Penske sites manage to get all their ads through both lines of defense. For AGH, I am running just the two basic blocklists maintained by the AdGuard Team, the DNS blocklist and the adaway blocklist. But these were fine originally. Now ads on e.g. hollywoodreporter.com just sail right on through.

Thoughts on how they are doing this, and what I can do about it?

reddit.com
u/RudeAdhesiveness9954 — 13 days ago
▲ 3 r/AdGuardHome+1 crossposts

If I have 2 instances of AdGuard Home what is the best way to have redundant DHCP?

Hi,

I currently have 2 instances of AdGuard Home setup along with an instance of keepalived per AdGuard instance and 1 instance of AdGuard Home Sync. This gives me DNS redundancy. But now I’m wondering about DHCP.

Currently DHCP is being done by my ISP Modem but it does some annoying things. Like I set my Keepalived virtual IP as the Primary DNS on the modem. But when it hands out DHCP leases it sets its own IP as the primary DNS and the Keepalived virtual IP as the secondary. Things are definitely still being filtered by AdGuard Home though at least.

But I’m unsure what the best way to handle DHCP via AdGuard Home is. The two setups I’ve seen online are to enable DHCP on both instances but split the range of available IP’s or just have DHCP active only on the Master server.

For the split scope option I’m not sure how DHCP leases would work or even add redundancy. My understanding is that if I have a DHCP lease from the master and it goes down that my device may have a hard time staying connected or getting a new lease from the backup server since the currently assigned IP would be outside the scope of the backup server’s IP range.

As for the option where DHCP is only enabled on the master my understanding is that if the master goes down Keepalived will handle the failover for DNS and that as long as my device’s current DHCP lease doesn’t expire before the Master comes back up that I shouldn’t lose my internet connection at all. Is this correct? If so, would this be the recommended approach? Also what would the recommended TTL settings for the leases be?

Thanks in advance!

reddit.com
u/browandr — 8 days ago
▲ 2 r/AdGuardHome

I’m experiencing a strange issue. All DNS requests made through Adguard now display the Docker network gateway IP address instead of client IPs.

I can no longer view any client IPs in Adguard; they all appear as 172.20.0.1, which is the Docker network gateway.

I haven’t changed any configurations, settings, or anything else. This change occurred overnight.

This issue is occurring on both my local network and over Tailscale. Just yesterday, all clients in Adguard were displaying either their local or Tailscale IP addresses.

Has anyone encountered this problem and knows how to resolve it?

reddit.com
u/itsandyayala — 11 days ago