image: repository: adguard/adguardhome tag: v0.107.23 env: TZ: Europe/Amsterdam ingress: main: enabled: true annotations: cert-manager.io/cluster-issuer: vault-issuer traefik.ingress.kubernetes.io/router.tls: 'true' hosts: - host: adguard.dc paths: - path: / pathType: Prefix tls: - secretName: adguard-tls hosts: - adguard.dc service: dns-tcp: enabled: true type: LoadBalancer annotations: metallb.universe.tf/address-pool: dns metallb.universe.tf/allow-shared-ip: adguard ports: dns-tcp: enabled: true port: 53 protocol: TCP targetPort: 5353 externalTrafficPolicy: Local dns-udp: enabled: true type: LoadBalancer annotations: metallb.universe.tf/address-pool: dns metallb.universe.tf/allow-shared-ip: adguard ports: dns-udp: enabled: true port: 53 protocol: UDP targetPort: 5353 externalTrafficPolicy: Local config: | bind_host: 0.0.0.0 bind_port: 3000 beta_bind_port: 0 users: [] auth_attempts: 5 block_auth_min: 15 http_proxy: "" language: en rlimit_nofile: 0 debug_pprof: false web_session_ttl: 720 dns: bind_hosts: - 0.0.0.0 port: 5353 statistics_interval: 1 querylog_enabled: true querylog_file_enabled: true querylog_interval: 90 querylog_size_memory: 1000 anonymize_client_ip: false protection_enabled: true blocking_mode: default blocking_ipv4: "" blocking_ipv6: "" blocked_response_ttl: 10 parental_block_host: family-block.dns.adguard.com safebrowsing_block_host: standard-block.dns.adguard.com ratelimit: 0 ratelimit_whitelist: [] refuse_any: true upstream_dns: - 192.168.1.1 #- https://dns10.quad9.net/dns-query upstream_dns_file: "" bootstrap_dns: - 192.168.1.1 all_servers: false fastest_addr: false allowed_clients: [] disallowed_clients: [] blocked_hosts: [] cache_size: 4194304 cache_ttl_min: 0 cache_ttl_max: 0 bogus_nxdomain: [] aaaa_disabled: false enable_dnssec: false edns_client_subnet: false max_goroutines: 300 ipset: [] filtering_enabled: true filters_update_interval: 24 parental_enabled: false safesearch_enabled: false safebrowsing_enabled: false safebrowsing_cache_size: 1048576 safesearch_cache_size: 1048576 parental_cache_size: 1048576 cache_time: 30 rewrites: [] blocked_services: [] local_domain_name: lan resolve_clients: true local_ptr_upstreams: [] tls: enabled: false server_name: "" force_https: false port_https: 443 port_dns_over_tls: 853 port_dns_over_quic: 784 port_dnscrypt: 0 dnscrypt_config_file: "" allow_unencrypted_doh: false strict_sni_check: false certificate_chain: "" private_key: "" certificate_path: "" private_key_path: "" filters: - enabled: true url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt name: AdGuard DNS filter id: 1 - enabled: false url: https://adaway.org/hosts.txt name: AdAway id: 2 - enabled: false url: https://www.malwaredomainlist.com/hostslist/hosts.txt name: MalwareDomainList.com Hosts List id: 4 whitelist_filters: [] user_rules: [] dhcp: enabled: false interface_name: "" dhcpv4: gateway_ip: "" subnet_mask: "" range_start: "" range_end: "" lease_duration: 86400 icmp_timeout_msec: 1000 options: [] dhcpv6: range_start: "" lease_duration: 86400 ra_slaac_only: false ra_allow_slaac: false clients: [] log_compress: false log_localtime: false log_max_backups: 0 log_max_size: 100 log_max_age: 3 log_file: "" verbose: false schema_version: 10