Differences

This shows you the differences between two versions of the page.

--- software:service:adguardhome [2026/02/07 11:14] – [One file (AdGuardHome.yaml)] warnaud
+++ software:service:adguardhome [2026/02/19 08:34] (current) – [debug/troubleshoot] warnaud
@@ Line 157: / Line 157: @@
 Optimized for Rapberry Pi/BeagleBoneBlack
 <code perl>
-  upstream_dns:
+dns:
-    - tls://dns.quad9.net
+  bind_hosts:
-    - tls://dns11.quad9.net
+    - 0.0.0.0
-    - https://dns.quad9.net/dns-query
+  port: 53
- # upstream_dns_file: /opt/AdGuardHome/conf/upstream-dns.txt
+  # UPSTREAMS : 100% chiffrés + diversifiés
+  upstream_dns:
+    - tls://dns11.quad9.net           # DoT Quad9 ECS (Suisse)
+    - tls://dns.quad9.net             # DoT Quad9 standard (Suisse)
+    - tls://unicast.uncensoreddns.org # DoT UncensoredDNS (Danemark)
+    - tls://dns.digitale-gesellschaft.ch  # DoT Suisse privacy[204]
+  upstream_dns_file: ""  # Ignore fichier
+  upstream_mode: parallel_requests  # Ignore 1 down
+  upstream_timeout: 5s
+  # BOOTSTRAP : IPs uniquement (zéro dépendance hostname)
   bootstrap_dns:
-    - 9.9.9.10
+    - 9.9.9.10        # Quad9 unfiltered IPv4
-    - 149.112.112.10
+    - 149.112.112.10  # Quad9 unfiltered IPv4
-...
+    - 2620:fe::10     # Quad9 unfiltered IPv6
-querylog:
-  dir_path: ""
+  # SÉCURITÉ ABSOLUE
-#  ignored: []
+  enable_dnssec: true              # Anti-poisoning
-  interval: 24h
+  refuse_any: true                 # Rejette ANY queries (attaques)
-  size_memory: 1000
+  cache_enabled: true
-  enabled: true
+  cache_size: 4194304              # 4MiB OK Pi2/BBB
-  file_enabled: false
-...
+  # ANTI-MITM
-  max_goroutines: 100
+  bogus_nxdomain:
-...
+    - 'version.bind'
+    - 'id.server'
+    - 'hostname.bind'
+  # CLIENTS
+  anonymize_client_ip: true        # Privacy locale
+  ratelimit: 20
+  # AVANTAGES SÉCURITÉ
+  max_goroutines: 100              # Pi2/BBB friendly
+</code>
+<code bash>
+sudo systemctl daemon-reload
+sudo systemctl restart AdGuardHome
+sudo systemctl status AdGuardHome
+</code>
+===== debug/troubleshoot =====
+<code bash>
+cd /opt/AdGuardHome/
+./AdGuardHome -c /opt/AdGuardHome/AdGuardHome.yaml --check-config
 </code>
-<code bash>systemctl restart AdGuardHome</code>