Tag: dns

Make jellyfin.home.example.com resolve to a LAN IP at home and over WireGuard or Tailscale, and to your public IP elsewhere. Unbound and AdGuard Home configs.

Run two AdGuard Home instances in sync so one dead node does not kill DNS for your whole house. Here is config sync with VRRP failover, done step by step.

cloudflared vs dnscrypt-proxy for encrypted DNS at home, setup steps, threat model, Pi-hole integration, and which one actually fits your home lab setup.

systemd-resolved does way more than mangle /etc/resolv.conf. Here's how its stub resolver, split DNS, DoT, DNSSEC, and resolvectl actually work.

How to expose a possibly-vulnerable app to the public internet and survive it: rootless containers, a file-integrity tripwire, and zero inbound SSH on the box.

Picking a recursive DNS resolver for your home lab, Unbound, Technitium, and BIND9 compared on speed, GUI, DNSSEC, and split-horizon.

Browser ad blockers miss half the ads. DNS blocking kills them everywhere, TV, phone, game console, everything. Pi-hole vs AdGuard Home: here's which one to run.

Stop using your registrar's janky DNS panel. Here's how Cloudflare DNS actually works, proxying, DNSSEC, dynamic DNS, and email records that don't break.

Your DNS queries go out in plain text, so your ISP logs every site you visit. This covers how DoH, DoT, and DoQ fix that, and how to self-host with AdGuard Home.

Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.

DNS broke again. The command sequence that finds it: verify the resolver, reach a server, dig the record, trace the query path, check reverse lookups.