Adguard Home on Home Assistant with FRITZ! Box

[Clluberlang]

Hello, I am brand new to using AdGuard Home. I have AdGuard Home as an addon on my home assistant, as a router I use a FRITZ! Box. I have now set up everything and wanted to ask if you can give me feedback if I have set up everything correctly. I'll attach screenshots of my settings. I haven't changed anything else. Thanks in advance.

[Dynamic5912]

Yes and no.

Remove the 8.8.8.8 from the alternate DNS otherwise queries will also be sent there for dns resolution.

Regarding your blocklists - you don't need Hagezi Pro and Ultimate - pick only one based on your blocking needed.

[Clluberlang]

You could also announce the IPv6 ULA address of your adguard in RAs and DHCPv6 info.

Only loop is that the GUA of the FB is still announced in the RAs / info.

Do you mean in this setting:
Home Network → Network → IPv6, and then under “DNSv6 Server in the Home Network” I should enter the IPv6 address of my Home Assistant?

Sorry, but some of the technical terms in English are a bit difficult for me to understand.

[GoetzGoerisch]

Yes.
Please mask the MAC address on future screenshots.
This is actual private data (IID) you should care about.
The RFC1918 addresses before doesn't matter

[Clluberlang]

Yes. Please mask the MAC address on future screenshots. This is actual private data (IID) you should care about. The RFC1918 addresses before doesn't matter

Thanks for pointing out the MAC addresses. I completely overlooked them in my haste, but I’ve redacted them now.

I’ve also added the IPv6 address of my AdGuard. Could you take another look and let me know if the rest of the configuration looks okay?

Thanks again for your help!

[GoetzGoerisch]

If this is the ULA and AdGuardHome listens there, than this is correct.

Look what your clients get assigned and check that this aligns.

Please be aware that IPv4 is preferred over IPv6 ULA.

[Clluberlang]

If this is the ULA and AdGuardHome listens there, than this is correct.

Look what your clients get assigned and check that this aligns.

Please be aware that IPv4 is preferred over IPv6 ULA.

Thx , I think I get it .
It sees that all works fine .

[Stern1900]

I don't think it's a bad idea to have an alternative DNS address. If the AdGuard server doesn't respond, you can still browse the Internet.

[Dynamic5912]

I don't think it's a bad idea to have an alternative DNS address. If the AdGuard server doesn't respond, you can still browse the Internet.

Yes and no.

But it will serve both DNS servers to the client who will inevitably which server to use.

Or, it will round-robin and serve either one.

Both results mean clients (potentially) not being filtered at all and bypassing blocklists etc. altogether.

[GoetzGoerisch]

Those DNS serves (2nd pic opening post) are not send to the clients. These are the upstream of the FB caching resolver.
Only the one served by DHCPv4, DHCPv6 INFO and RNDSS will be served to the clients.
Which typically is the FB internal resolver.

[GoetzGoerisch]

Current FB beta software has blocklist support build in. But without the nice logs and statistics like AGH.