AdGuard Home DNS with SparkyLinux (based Debian) /DNSSEC/HTTPS over DNS

[budking]

My AdGuardHome Guide:

-> Download AdGuardHome  AdGuardHome_linux_arm64.tar.gz
(https://github.com/AdguardTeam/AdGuardHome/releases)

-> Move folder to /opt
Open terminal in unzipped folder.
sudo mv ./AdGuardHome /opt

-> Install AdGuardHome:
 -> sudo /opt/AdGuardHome/AdGuardHome -s install

-> Create the /etc/systemd/resolved.conf.d directory, if necessary:
       sudo mkdir -p /etc/systemd/resolved.conf.d
Deactivate DNSStubListener and update DNS server address. To do that, create a new file, /etc/systemd/resolved.conf.d/adguardhome.conf, with the following content: sudo nano /etc/systemd/resolved.conf.d/adguardhome.conf
[Resolve]
DNS=127.0.0.1-
DNSStubListener=no
    • Specifying 127.0.0.1 as DNS server address is necessary because otherwise the nameserver will be 127.0.0.53 which doesn't work without DNSStubListener.
    • Activate another resolv.conf file:
sudo mv /etc/resolv.conf /etc/resolv.conf.backup
sudo ln -s /run/systemd/resolve/resolv.conf /etc/resolv.conf

-> Restart SparkyLinux

-> Open 127.0.0.0 in browser and start quick installation.
http://127.0.0.0/
http://127.0.0.1/
http://127.0.0.1:3000

#Done

Settings for example:
Upstream-DNS-Server: https://family.adguard-dns.com/dns-query
Fallback-DNS-Server: tls://family.adguard-dns.com
Bootstrap-DNS-Server: 94.140.14.15 94.140.15.16
Private inverse DNS-Server: 192.168.1.1
(Info: adguard-dns.io/de/public-dns.html)

#Set all option enable if you want (General Settings & DNS Settings | Encryption Settings not necessary)

#Now you can creating DNS-Rules for blocking.

Browser Mullvad or Firefox:
DNS over HTTPS: Maximum protection -> https://xxxxxxxx.d.adguard-dns.com/dns-query (Get your private link from adguard-dns.io account)

If you want to delete:
sudo rm /etc/systemd/system/AdGuardHome.service
sudo rm -r /opt/AdGuardHome/