Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

psyonik.tech

Post reply on HN
Print view View original

11–20 of 32 posts

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#11

Post by BrandoElFollito »

pSYoniK wrote: post #10
BrandoElFollito wrote: post #9

Another solution to consider is Tailscale. There is a vast free tier and it makes securing your network really simple.

I mentioned that as an alternative along with Headscale and Nebula. Not for me though! At least not now.

Ah you are right, sorry. Somehow I learned on the networks section and stuff for there. Sorry for that.

I went through the journey of having multiple technologies VPNs to my home lab and cross-places. This is fun, a rewarding exercice.

I switched to first Headscale, and then Tilescale for the ease of setting this up, which frees time for other home lab activities

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#13

Post by inetknght »

plqbfbv wrote: post #5

I have a similar setup, but with AdGuardHome. I used Pi-Hole in the past, but AdGuardHome's UI is from this century at least. That, and the fact that with Pi-Hole it was very difficult have IPv6 working. I have an instance on my router in my home network for covering all devices by default, and a hosted one to which I connect when outside via mobile network. Split-tunneling with only the DNS routed, so that I don't h…

> I used Pi-Hole in the past, but AdGuardHome's UI is from this century at least.

I like Pi-Hole's UI. It's functional and simple.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#14

Post by syntaxing »

I self host a lot of things, pihole and adguard is one thing I no longer self host for about five years now. $20/year for NextDNS for the whole family is worth every penny and most importantly spouse approved. My spouse doesn’t mind what we self host as long as the friction to use it is not too high.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#15

Post by Telaneo »

pSYoniK wrote: post #8

I want to make a few points to help clarify some of the choices and why I made them. This is very helpful and I appreciate all the comments as it highlights how some things are clear in our head but we don't end up sharing that with anyone reading. So: 1. I looked at AdGuardHome but I preferred PiHole because I found its documentation a bit more helpful for my purpose (the Unbound sample, the Wireguard setup, etc) 2.…

> 1. I looked at AdGuardHome but I preferred PiHole because I found its documentation a bit more helpful for my purpose (the Unbound sample, the Wireguard setup, etc)

Probably the right call, but funnily enough, I had to go the other way. PiHole started using 100% of the CPU on my Raspberry Pi 1B after an update to version 6.x, which then obviously slowed the entire network to a crawl and made it unusable. Although later versions supposedly fixed that, whatever was the latest version at the time still had that problem for me, even on a completely fresh install.

AdGuardHome worked for me without any hassle, but I would never have even considered it, given I'd been happy with PiHole for 5+ years, if it hadn't been for the fact that whatever update PiHole did completely borked its usability.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#16

Post by floundy »

syntaxing wrote: post #14

I self host a lot of things, pihole and adguard is one thing I no longer self host for about five years now. $20/year for NextDNS for the whole family is worth every penny and most importantly spouse approved. My spouse doesn’t mind what we self host as long as the friction to use it is not too high.

I have two pi-holes running concurrently, mainly so it doesn’t ruin the internet for my wife if one goes down. In 4-5 years of running pi-hole I’ve had I think 3 complete failures, 2 were due to cheap SD card corruption and one due to a failed upgrade to pihole v6.

I also excluded most of her devices from any filtering by the pihole because she wants to be able to click the sponsored links and ads on Google. Whatever.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#17

Post by syntaxing »

floundy wrote: post #16
syntaxing wrote: post #14

I self host a lot of things, pihole and adguard is one thing I no longer self host for about five years now. $20/year for NextDNS for the whole family is worth every penny and most importantly spouse approved. My spouse doesn’t mind what we self host as long as the friction to use it is not too high.

I have two pi-holes running concurrently, mainly so it doesn’t ruin the internet for my wife if one goes down. In 4-5 years of running pi-hole I’ve had I think 3 complete failures, 2 were due to cheap SD card corruption and one due to a failed upgrade to pihole v6. I also excluded most of her devices from any filtering by the pihole because she wants to be able to click the sponsored links and ads on Google. Whatever…

That’s why nextDNS is nice, there’s a “allow affiliated link” setting. So it blocks the ads but allows your wife to click on sponsored ad links. How’s do you manage Adblock when you’re not on your network? That’s the main draw of NextDNS for me. Works more or less anywhere

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#18

Post by floundy »

syntaxing wrote: post #17
floundy wrote: post #16

Earlier quoted context omitted.

I have two pi-holes running concurrently, mainly so it doesn’t ruin the internet for my wife if one goes down. In 4-5 years of running pi-hole I’ve had I think 3 complete failures, 2 were due to cheap SD card corruption and one due to a failed upgrade to pihole v6. I also excluded most of her devices from any filtering by the pihole because she wants to be able to click the sponsored links and ads on Google. Whatever…

That’s why nextDNS is nice, there’s a “allow affiliated link” setting. So it blocks the ads but allows your wife to click on sponsored ad links. How’s do you manage Adblock when you’re not on your network? That’s the main draw of NextDNS for me. Works more or less anywhere

Huh interesting feature, I'll have to check it out today to see if there's enough improvements over pihole to warrant a switch.

I'm effectively always on my network because I use Wireguard to VPN back in to home, so I can easily access my server and RPi dashboards. Though at this point I've whitelisted a few dozen domains that were giving my wife or I issues, and excluded most of her devices because she doesn't want to be on it, so it's pretty hands-off. The only time I have to disable the pihole nowadays is when I'm unsubscribing from an email list and the link is a tracking link. And that's with over 3M domains blocked.

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#19

Post by leetrout »

pSYoniK wrote: post #8

I want to make a few points to help clarify some of the choices and why I made them. This is very helpful and I appreciate all the comments as it highlights how some things are clear in our head but we don't end up sharing that with anyone reading. So: 1. I looked at AdGuardHome but I preferred PiHole because I found its documentation a bit more helpful for my purpose (the Unbound sample, the Wireguard setup, etc) 2.…

> I saw the docker compose package, but I wanted something that runs at the OS level

For my curiosity: because you wanted to use systemd or didn't want to run another piece of software (docker) or something else?

Re: A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

#20

Post by beala »

muppetman wrote: post #4

You don't need a VPN! I host an AdguardHome instance and just expose TCP/853. I put my domain name in the Private DNS settings of my Android and I get 24/7 adblocking without the hassle and battery drain of my Wireguard VPN (which I still use to access private stuff)

I tried setting your domain as my resolver but no luck sadly.

alex@thinkpad ~> kdig @muppetz.com +tls news.ycombinator.com

;; WARNING: connection timeout for 116.251.193.218@853(TLS)

;; ERROR: failed to query server muppetz.com@853(TCP)

Post reply on HN