AdGuard Home with Nginx Proxy manager
reddit / selfhosted

----------------------------------------------------------------------
codemaker92 · 2023-12-10 20:36

I am running a small Proxmox Home lab with a static IP address at
home. What I have:

1. Domain pointing to that IP address.
2. Adguard Home container
3. Other containers like immich, nextcloud etc...

What I want is to use my DNS server outside of my local network and I
achieved that. Opened ports, added encryption to Adguard, etc and it
is working just fine as a private DNS server on an Android phone. I
also want to put other containers behind reverse proxy but here is the
problem.

If I do that, I can access them only when not using my DNS server. So
I tried to put DNS rewrite but can only access that container when I
am on the local network, but not outside.

Any idea how to solve this or what am I doing wrong?

To sum everything up, I want to have a DNS server and other containers
accessible locally and on the internet with the same URL. Hope that
makes sense.

----------------------------------------------------------------------
Proximus88 · 2023-12-10 21:54

Instead of opening your adguarhomento the internet just setup a vpn.

I have setup a wireguard vpn with as 'allowed ips' my local network.
DNS is my local Adguard ip.

This way only my local network and DNS traffic goes over the vpn.

To make it complete I use Tasker on my Android to automatically
connect my vpn when not connected to my home wifi.

----------------------------------------------------------------------
codemaker92 · 2023-12-10 21:55

I dont want to use vpn

----------------------------------------------------------------------
DrOop104 · 2023-12-11 15:00

If I understood correctly, the problem that you are having is that
when you create a DNS rewrite to point to the local ip of your reverse
proxy, when you are outside your home and access your domain since you
have now a DNS rewrite you can't access it because that domain points
now to a private ip address subnet.

Instead of using a direct DNS rewrite on the gui, you can create a
custom filter rule that also creates a DNS rewrite, **based on the
client ip**. So you could make it that when you are quering DNS in you
local network, your domain points to the local IP where the reverse
proxy is running (but not when the client is outside your local
network). To do this, go into "Filters>Custom Filtering Rules" and
create a rule like this one if you want to redirect only to the
domain:

`||yourdomain.xyz^$important,client=clientsipnetwork/XX,dnsrewrite=the
reverseproxylocalip`

And/or this one if you want to access the subdomains:

`||*.yourdomain.xyz^$important,client=clientsipnetwork/XX,dnsrewrite=t
hereverseproxylocalip`

You can check this documentation if you want to investigate further:
[https://github.com/AdguardTeam/AdGuardHome/wiki/Hosts-
Blocklists](https://github.com/AdguardTeam/AdGuardHome/wiki/Hosts-
Blocklists)