Optimal settings for AdGuard Home in Raspberry Pi Zero W

raspberry_pi_zerow_adguardhome.md

bind_host: 0.0.0.0
bind_port: 8080
beta_bind_port: 3001
users:
- name: admin
  password: ''
auth_attempts: 5
block_auth_min: 15
http_proxy: ""
language: ""
debug_pprof: false
web_session_ttl: 720
dns:
  bind_hosts:
  - 0.0.0.0
  port: 53
  statistics_interval: 1
  querylog_enabled: true
  querylog_file_enabled: true
  querylog_interval: 24h
  querylog_size_memory: 1000
  anonymize_client_ip: false
  protection_enabled: true
  blocking_mode: default
  blocking_ipv4: ""
  blocking_ipv6: ""
  blocked_response_ttl: 10
  parental_block_host: family-block.dns.adguard.com
  safebrowsing_block_host: standard-block.dns.adguard.com
  ratelimit: 20
  ratelimit_whitelist: []
  refuse_any: true
  upstream_dns:
  - tls://one.one.one.one
  - tls://dns.google
  - tls://dns.quad9.net
  - '[/pool.ntp.org/]1.1.1.1'
  - '[/pool.ntp.org/]1.0.0.1'
  - '[/pool.ntp.org/]2606:4700:4700::1111'
  - '[/pool.ntp.org/]2606:4700:4700::1001'
  upstream_dns_file: ""
  bootstrap_dns:
  - 1.1.1.1
  - 1.0.0.1
  - 2606:4700:4700::1111
  - 2606:4700:4700::1001
  - 8.8.8.8
  - 8.8.4.4
  - 2001:4860:4860::8888
  - 2001:4860:4860::8844
  - 9.9.9.9
  - 149.112.112.112
  - 2620:fe::fe
  - 2620:fe::9
  all_servers: true
  fastest_addr: false
  fastest_timeout: 1s
  allowed_clients: []
  disallowed_clients: []
  blocked_hosts:
  - version.bind
  - id.server
  - hostname.bind
  trusted_proxies:
  - 127.0.0.0/8
  - ::1/128
  cache_size: 4194304
  cache_ttl_min: 2400
  cache_ttl_max: 84600
  cache_optimistic: true
  bogus_nxdomain: []
  aaaa_disabled: false
  enable_dnssec: true
  edns_client_subnet: false
  max_goroutines: 50
  ipset: []
  filtering_enabled: true
  filters_update_interval: 1
  parental_enabled: false
  safesearch_enabled: false
  safebrowsing_enabled: false
  safebrowsing_cache_size: 1048576
  safesearch_cache_size: 1048576
  parental_cache_size: 1048576
  cache_time: 30
  rewrites:
  - domain: mikrotik
    answer: 192.168.1.1
  - domain: qnap
    answer: 192.168.1.10
  blocked_services: []
  upstream_timeout: 10s
  local_domain_name: lan
  resolve_clients: true
  use_private_ptr_resolvers: true
  local_ptr_upstreams: []
tls:
  enabled: true
  server_name: ''
  force_https: true
  port_https: 8081
  port_dns_over_tls: 853
  port_dns_over_quic: 784
  port_dnscrypt: 0
  dnscrypt_config_file: ""
  allow_unencrypted_doh: false
  strict_sni_check: false
  certificate_chain: ""
  private_key: ""
  certificate_path: /etc/letsencrypt/live/''/fullchain.pem
  private_key_path: /etc/letsencrypt/live/''/privkey.pem
filters:
- enabled: true
  url: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
  name: StevenBlack
  id: 1599317214
- enabled: true
  url: https://raw.githubusercontent.com/tiuxo/hosts/master/ads
  name: Tiuxo
  id: 1599317215
- enabled: true
  url: https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts
  name: Jdlingyu
  id: 1599317217
- enabled: true
  url: https://raw.githubusercontent.com/AdguardTeam/AdguardFilters/master/SpywareFilter/sections/mobile.txt
  name: AdGuard-Spyware
  id: 1636996293
whitelist_filters:
- enabled: true
  url: https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/whitelist.txt
  name: anudeepND
  id: 1612271587
- enabled: true
  url: https://raw.githubusercontent.com/Ultimate-Hosts-Blacklist/whitelist/master/domains.list
  name: Ultimate-Hosts-Blacklist
  id: 1648752551
user_rules:
- '@@||track.effiliation.com^'
- '@@||newrelic.com^$important'
- '@@||clk.tradedoubler.com^'
- '@@||ad.doubleclick.net^'
- '@@||enterprise.activity.windows.com^'
- '@@||edge.activity.windows.com^'
- '@@||v10.vortex-win.data.microsoft.com^'
- '@@||v20.events.data.microsoft.com^'
- '@@||v20.vortex-win.data.microsoft.com^'
- '@@||tc.tradetracker.net^'
- '@@||*.cloud.answerhub.com^'
- '@@||*.gov^'
- '@@||*.inc.com^'
- '@@||*.lenta.ru^'
- '@@||*.smartsheet.com^'
- '@@||ae01.alicdn.com^'
- '@@||app.link^'
- '@@||browser.pipe.aria.microsoft.com^'
- '@@||get3.adobe.com^'
- '@@||mobile.pipe.aria.microsoft.com^'
- '@@||s.youtube.com^'
- '@@||settings-win.data.microsoft.com^'
- '@@||teslarati-com-edge.ntv.io^'
- '@@||v10.events.data.microsoft.com^'
- '@@||*.githubapp.com^'
- '@@||www.googleadservices.com'
- '@@||s.click.aliexpress.com'
- '@@||sync.richaudience.com'
- '@@||slack.com^'
- '@@||slack-edge.com^'
- '@@||pirate-bay.net^'
- '@@||clickserve.dartsearch.net^'
- '@@||bnc.lt^'
- '@@||ojrq.net^'
- '@@||ssl.google-analytics.com^$important'
- '@@||www.google-analytics.com^$important'
- '@@||control.kochava.com^$important'
- '@@||www.anrdoezrs.net^$important'
- '@@||www.emjcd.com^$important'
- '@@||shareasale.com^$important'
- '@@||go.redirectingat^$important'
dhcp:
  enabled: false
  interface_name: ""
  dhcpv4:
    gateway_ip: ""
    subnet_mask: ""
    range_start: ""
    range_end: ""
    lease_duration: 86400
    icmp_timeout_msec: 1000
    options: []
  dhcpv6:
    range_start: ""
    lease_duration: 86400
    ra_slaac_only: false
    ra_allow_slaac: false
clients: []
log_compress: false
log_localtime: false
log_max_backups: 0
log_max_size: 100
log_max_age: 3
log_file: ""
verbose: false
os:
  group: ""
  user: ""
  rlimit_nofile: 0
schema_version: 12