Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

psyonik.tech

Post reply on HN
Print view View original

1–10 of 32 posts

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#3

Post by pSYoniK »

gentooflux wrote: post #2

I just use blocklists in Unbound without having to bother with Pi-Hole. Nothing against Pi-Hole, I just find it easier long-term to maintain fewer services.

I have looked at that briefly, I think I had gone with pihole in the end for the ability of having a UI to easily see any resolution issues and local dns management (which, I think, is also present in Unbound but not in a UI but via configs).

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#4

Post by muppetman »

You don't need a VPN! I host an AdguardHome instance and just expose TCP/853. I put my domain name in the Private DNS settings of my Android and I get 24/7 adblocking without the hassle and battery drain of my Wireguard VPN (which I still use to access private stuff)

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#5

Post by plqbfbv »

I have a similar setup, but with AdGuardHome. I used Pi-Hole in the past, but AdGuardHome's UI is from this century at least. That, and the fact that with Pi-Hole it was very difficult have IPv6 working.

I have an instance on my router in my home network for covering all devices by default, and a hosted one to which I connect when outside via mobile network. Split-tunneling with only the DNS routed, so that I don't have to push all traffic through the VPN.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#6

Post by hk1337 »

plqbfbv wrote: post #5

I have a similar setup, but with AdGuardHome. I used Pi-Hole in the past, but AdGuardHome's UI is from this century at least. That, and the fact that with Pi-Hole it was very difficult have IPv6 working. I have an instance on my router in my home network for covering all devices by default, and a hosted one to which I connect when outside via mobile network. Split-tunneling with only the DNS routed, so that I don't h…

I didn’t have a problem with IPv6 necessarily with pihole as much as my ISP, AT&T, didn’t play well with me wanting to use another DNS for IPv6.

I ended up just going to NextDNS. All my devices are Apple so I could install the certificate and it works away from home too.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#8

Post by pSYoniK »

I want to make a few points to help clarify some of the choices and why I made them. This is very helpful and I appreciate all the comments as it highlights how some things are clear in our head but we don't end up sharing that with anyone reading. So:

1. I looked at AdGuardHome but I preferred PiHole because I found its documentation a bit more helpful for my purpose (the Unbound sample, the Wireguard setup, etc)

2. I saw the docker compose package, but I wanted something that runs at the OS level. There are docker packages for Wireguard too and I had also a look at Mistborn (https://gitlab.com/cyber5k/mistborn)

3. The VPN is the main thing I wanted setup to reach resources on my home network, adblocking and DNS came a bit later, so you can run this without a VPN, but its central for my setup.

4. I really wanted this setup at the OS level and to hopefully learn more about the whole process.

Thanks again for the suggestions though!

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#10

Post by pSYoniK »

BrandoElFollito wrote: post #9

Another solution to consider is Tailscale. There is a vast free tier and it makes securing your network really simple.

I mentioned that as an alternative along with Headscale and Nebula. Not for me though! At least not now.
Post reply on HN