How to Install AdGuard Home on a Synology NAS!

✅ Written Instructions: www.wundertech.net/how-to-ins...
🔔 Subscribe for more tech related tutorials and overviews: link.wundertech.net/ssYt
🚀 Product Recommendations: link.wundertech.net/rmYt
❤️ Check out our website: link.wundertech.net/wtYt
📌 Synology NAS Pi-hole Setup: • How to Setup Pi-hole o...
📌 Raspberry Pi Pi-hole Setup: • Pi-hole Raspberry Pi I...
📌 How to SSH into a Synology NAS: • How to SSH into a Syno... DISCLAIMER: The information in this video has been self-taught through years of technical tinkering. While we do our best to provide accurate, useful information, we make no guarantee that our viewers will achieve the same level of success. WunderTech does not assume liability nor responsibility to any person or entity with respect to damage caused directly or indirectly from its content or associated media. Use at your own risk.
WunderTech is a trade name of WunderTech, LLC.

[@77axwell]

Just got a Synology Nas. Your video helped me a lot! Took me awhile to figure out my own IPs vs yours, found an IP calculator that helped. Might want to point that out. And an Adguard tutorial would be cool too. About to check out more of your videos on this thing now. Best help I found so far. Thanks!!!

[@someguy0523]

Great Instruction, thanks worked exactly as described.

[@AuroraPixel6]

Great video 👍🏻 I like the statistics on AdGuard more. There are categories like „malware“.

[@byronlewis4398]

Great video. The install on a Qnap NAS is quite a bit more straight forward.

[@TheMattMustain]

Is this process still relevant now Synology has updated to Container Manager with DSM 7.2? It appears at least the network interface portion has changed. I don't see where I can add two interfaces to the container.

[@Ace-bk7xl]

I've run into the same issue, not sure how to proceed...

[@matthieug.4530]

Same here...

[@cyberwasp461]

I was going to try doing it using the macvlan but got a bit nervous. Am not sure what to put in the sudo line and didn't want to risk making things worse😪 Will stick with Pihole.

[@ShrijitNair]

Thanks a ton for all the videos ! So easy to set-up docker containers. I have one issue. I am using bond0 interface as shown in ifconfig, however unable to get Adguard to show up in port 3000. Firewall is not enabled. Does macvlan not work with bond0 as parent interface ? Works perfectly fine when I use the same network interface as docker host. If I use that method, and change web port to 81, is it fine ? Do I need to change DNS port also ?

[@WunderTechTutorials]

It should work with a bond interface, though I admit that I don't remember if I had used Adguard in the past (not using it anymore) with a bond interface. You shouldn't change the DNS port, but if you use port 81 and leave the DNS port as-is, everything should function as expected. You just have to remember to use port 81 in the future.

[@BrazenNL]

@@WunderTechTutorials What are you using now? Pi-hole? NextDNS?

[@WunderTechTutorials]

@@BrazenNL I prefer Pi-hole. I think it's the best overall package, but I used AdGuard Home for a while to test it and it works well too. I would say it's more personal preference!

[@WebsmithCo]

Thanks so much for this. It ran great for a few weeks but then my NAS had to be restarted after an update. After that it still works but I couldn’t login to use certain things on my NAS like photos and download manager. Homebridge also stopped working at this point. If I change my router settings back to default DNS servers everything works fine again. What am I missing?

[@WunderTechTutorials]

Were you using local DNS? If so, do those records still exist?

[@alwayslate1982]

Amazing guide! One issue I'm running into is the Synology nas using AdGuard DNS. I've tried setting its DNS server to the IP of the docker bridge network, but it doesn't work. I've set it to use my router as DNS for now, but I can't seem to get it to talk to the adguard container. Any help would be greatly appreciated as I'm not a networking guru unfortunately. Thanks!!

[@WunderTechTutorials]

Thanks! The bridge IP is definitely how you do it. Is that bridge network added to the container? As long as it's added to the container and you're using the bridge IP (as a /32), it should work.

[@alwayslate1982]

@@WunderTechTutorials Wow I didn't expect to hear from you - especially so quick 🥳 I'll try removing the bridge and re-adding it to see if that does the trick.

[@domenicklandaeta-rosato3968]

So I have Pi-Hole running on a dedicated RPi attached to my network. Based on a conversation we had on Reddit, I decided to set up AdGuard on my Synology to be around as a JUST IN CASE the pi goes down, I won't lose internet connectivity. So I followed the instructions but AdGuard's dashboard isn't showing any activity. Am I right in assuming that's because my Pi-Hole isn't letting any requests get to the AdGuard DNS server since it's first on the list? Or should I still be seeing some activity on the AdGuard even with Pi-Hole still running?

[@curtney]

I have pi-hole running on an attached RPi to my network as well and also I configured another pi-hole on my Synology as backup. A similar setup. Make sure the router has the ip address of adguard as a secondary dns. Since, this is a similar setup I think that might solve your problem.

[@WunderTechTutorials]

There's a good chance that the server isn't needed at that point, which is why you aren't seeing any query requests. If you shut down your Raspberry Pi (temporarily), you should see requests sent to the AdGuard Home. If you DON'T, then something isn't configured properly. It could be the IP address of the DNS server in your routers settings, as I'm assuming that you were able to navigate to it through the web address. Another issue could be port 53 not having an "allow" rule on your Synology firewall. If there are requests when you shut down the Raspberry Pi, you might not have enough DNS requests for a secondary DNS server to be a necessity. This will STILL provide redundancy (which is great), but you might not be taxing the Raspberry Pi, which isn't bad either! Not sure how much this helps, but let me know if I can clarify anything!

[@domenicklandaeta-rosato3968]

@@curtney Yea, my router lets me put in two DNS addresses. My first one is the Pi and the second one I made this Synology/AdGuard item. I "disabled" the Pi-hole to test it and nothing happened on AdGuard but I'm thinking that didn't put my network in the desired state. I think my next test (once work is done so it doesn't kick me offline) is to actually take the Pi offline and see what happens.

[@xavif5684]

Hello, can I run both adguard and nginx proxy manager together on my nas? What would I do, two macvlans? I have npm working under 8080 and 4443 ports but it would be interesting working both on 80 and 443 ports. Is it possible?

[@WunderTechTutorials]

If you have multiple NIC's (ethernet ports) and you create a different macvlan network interface for each NAS network interface, then yes. If you only have one, then you'll have to pick one or the other unfortunately.

[@xavif5684]

by the way, since I have running services such as Photo Station (wich uses an Apache server and ports: 80 or 443) on my NAS and the docker won't start up by port conflicts reason. What would be a workarround? (of course I've created macvlan and unlinked the "bridge" network from this docker)

[@WunderTechTutorials]

That's what the macvlan is used for. If you'd like to use the host, you'll have to specify a different host port that's not in use (8080 host to 80 container, for example).

[@RockTheCage55]

have the latest version of dsm. You can't add multiple networks. You can just choose 1. Have any idea how to get around this? maybe i have to manually write a docker compost file?

[@WunderTechTutorials]

After creating the container (with it off), you can edit the networks and add it to the container. I'm not sure why Synology decided to change it like that.

[@JimiMoore]

Is the Docker macvlan network interface a necessity? Can this be setup using the same network as docker host?

[@WunderTechTutorials]

You can use the host, but you're going to have to use a port other than 80 for the web management console. Using the macvlan network interface avoids all of the port conflicts.

[@kaput808]

Another good video my friend. I've decides since I have a second NAS I would set up AdGuard on this one while Pihole was on the other. I decided to try the Macvlan on this install and see how difficult that would be. 2 things. 1. I cant reserve my Adguard Macvlan IP (the 192.168.x.198) on my router because it's not showing up as an actual device on my router. EDIT: NM it popped up an hour later so I could reserve it. 2. I ran into the same issue Adam Street did where I can not use the newly created ag_bridge I needed to use the default bridge. I am so glad he ran into that issue and it helped me. So my question is. Is that ok? Do I need to keep that ag_bridge? Using the default bridge doesn't affect anything, does it? Hope all this isn't a bother. I really appreciate all the information you share and the time and effort put into these tutorials

[@WunderTechTutorials]

The ag_bridge is only needed IF you want to connect your NAS to the AdGuard Home server and use it as the NAS's DNS server. If you will be changing your router to point to the AdGuard Home server, you do NOT need this network since the NAS will go through the router. Hopefully this helps, but let me know if I can further clarify. Thanks for watching!

[@kaput808]

@@WunderTechTutorials Ah, I see. I thought you would only use your router for DNS. You mean if you were to install the DNS server package and your NAS was used for DNS you would connect it to ADGuard?

[@WunderTechTutorials]

@@kaput808 No, I meant setting the Primary/Secondary DNS servers on the router to be the AdGuard Home server. Basically, you have two paths: Device -> AdGuard Home Device -> Router -> AdGuard Home In the second example, you don't need the bridge interface as all DNS traffic is sent through your router.

[@kaput808]

@@WunderTechTutorials Ah. Thanks for the clarification. I appreciate it.

[@stephene3179]

@@WunderTechTutorials so how do you get traffic to flow through the NAS AdGuard Home server using the ag_bridge (AND NOT CHANGING THE DNS SERVERS IN MY gateway)? When I change the DNS in my outer to my AdGuard Home server IP, nothing gets blocked, only the DNS queries show up as non-zero in the AG dashboard. Also, the only client that shows up in AG dashboard is my gateway IP (which is not what I want).

[@Sparky_007]

@WunderTech Installed Docker on Synology version 7.1.1 But Docker does not create any docker folder! What to do?

[@WunderTechTutorials]

That's very strange. Have you tried to uninstall it and reinstall it?

[@amritpoudel9892]

great instructions ... I have one issue.. I am unable to access adguard home via macvlan ip.. I did set up macvlan and I can confirm, I can ping from adguard to gateway, can also ping bridge network ip but unable to ping NAS itself. when i did tracert, it show host not reachable.. Is there anything I am missing?

[@WunderTechTutorials]

The bridge IP is how the NAS and containers will communicate. Have you tried accessing the container from the NAS using the bridge IP?

[@Gemi2]

I would like to enable the https certificate, tried using the proxy part of your bitwarden tutorial, but apartently cant use the same domain even though I have different ports.

[@WunderTechTutorials]

What exactly are you trying to setup the reverse proxy for? Are you trying to access it from outside of your network? Technically, the same instructions should work. The reverse proxy will have to use the domain name that you will be using and the port you'd like to use. The destination will be HTTP, the hostname will be the IP address of the macvlan network in AdGuard Home, and port 80. After that, you should be able to create/assign the certificate and navigate to it through the domain name/port. Just make sure you opened the port for your reverse proxy! Beware though that this will expose AdGuard home to external networks, which might not be necessary based on what you're trying to do. Let me know if you have any questions.

[@Gemi2]

@@WunderTechTutorials Yeah bitwarden is working fine, tired using the same method using different ports (3000 and 3001) but got an error that I should use a different domain. I'm trying to allow adguard to read the certificates to improve its adblocking abitilies. Does that even make sense? 😵

[@Yarri.Kerckhoffs]

Can you setup a macvlan with multiple IPs since I am installing multiple containers and want them all to have a different IP? I tried editing "--ip-range=192.168.1.198/28" (to get 14 IPs available) but for some reason I am not able to ping the container on any of those.

[@WunderTechTutorials]

Are you able to validate on your DHCP server that the IP address is successfully being handed out? I haven't done this myself, but I would assume that what you did should work.

[@Yarri.Kerckhoffs]

@@WunderTechTutorials I checked in Putty and the IP 16.168.1.192 (first) was assigned to the container. Got it eventually to work after several hours of work :-) Keep up the good work, love your videos!

[@WunderTechTutorials]

@@Yarri.Kerckhoffs Thanks so much! Glad to hear you got it working!

[@sproid]

After creating the credentials I get this Error: control/install/configure | dnsServer.Prepare: preparing internal proxy: validating private RDNS upstreams: no upstream specified | 500

[@adamstreet7741]

Hey great videos, nicely explained. I'm having a little issue, whenever I change my DNS server on Windows to the 192.168.0.198 address which was set and created for ag_network, I lose all connectivity, and I don't get any queries showing up on the adguard dashboard. I followed macvlan instructions (only difference is that my NAS is on 192.168.0.0 subnet instead of 1.0, so I made the relevant change in setting the IP range) and called the new network ag_network and the bridge ag_bridge (same IP as you put it in). The container is set to use both those networks, and I can access the adguard UI at that IP. However pointing my computer's DNS at it does nothing except remove all net connectivity for my machine. Any suggestions? Thank you!

[@adamstreet7741]

so I figured it out - there's an existing bridge network on my docker, once I set the adguard container to connect to that particular bridge rather than the newly set up bridge, it worked. I'm not enough of a networking person to understand why unfortunately. Thanks for all you do!

[@WunderTechTutorials]

@@adamstreet7741 I'm sorry that I didn't get a chance to respond, but I'm glad to hear you got it working! As far as the bridge, are you connecting to the server using the Synology's IP or the macvlan network interface that we created? If it's the Synology's IP, it could be that you didn't remove that network (you are only supposed to have two networks, macvlan and macvlan_bridge).

[@adamstreet7741]

@@WunderTechTutorials hey no worries, we're probably different timezones and I kept tinkering, it was only 30 mins or so between my two posts. I'm connecting to the Adguard server using the macvlan interface we created, so 192.168.0.198, but the container is using the default bridge with 172.17.0.1 gateway, because when on the macvlan_bridge of 192.168.10.1 I couldn't connect anything via DNS. As an aside, reverse proxy also doesn't want to resolve to the macvlan network.

[@WunderTechTutorials]

@@adamstreet7741 Got it, glad to hear you got it working. For the reverse proxy, are you trying to expose AdGuard outside of your local network? If you are, do you have a firewall port that is only allowing local traffic?

[@adamstreet7741]

@@WunderTechTutorials Cheers. I have one port open for all reverse proxies, which get routed through the DSM application portal

[@TGiGamingYT]

Great video.. I did all but getting docker api has failed error while lunching it. Could you please help?

[@WunderTechTutorials]

Are you getting that when you download the container? Can you download any other containers?

[@TGiGamingYT]

@@WunderTechTutorials i found the solution for this as it was coz bridge network ( i mistakenly used same subnet) but i am running into seperate issue: Docker container is running but i cannot access adguard home in that ip. Firewall ports are open, i can ping from adguard home to Bridge ip. When i run tracert from my PC to Adguard ip ( it gets to NAs than failed saying destination host unreachable) Wondering what i did wrong?

[@WunderTechTutorials]

@@TGiGamingYT Hmm, that's for the macvlan I assume? The macvlan should be on the same subnet as the local network - did you set it up that way?

[@thisisfabiop]

Why you haven't created the next step guide, with the creation of the certificate etc? Anybody who watched this will need that guide also.

[@WunderTechTutorials]

I haven't personally ever done that for any local DNS servers. I've always just done what was in the video and used it locally without issue.

[@dennisyildirim2708]

Hmm after SSH'ing into nas, entered the sudo command to create the network. But faced with this error. Error response from daemon: invalid subinterface vlan name ovs_eth0, example formatting is eth0.10 should I just rename ovs_eth0 as eth0.0?

[@WunderTechTutorials]

You will have to use whatever NIC name you have on your NAS. Is it ovs_eth0?

[@dennisyildirim2708]

@@WunderTechTutorials Thanks heaps I found that I should have used ETH0 :) And it worked. Btw I'm setting up reverse proxy via synology application portal. I've set my a record on my domain and everything is all good except that it does not work. So when I type my AdguardDNS IP and hit enter. It automatically goes into adguard interface without even typing the port. When I type IP:80 it quickly refreshes the page and again removes that :80 from the end and goes into the ip adress directly, and shows the adguard interface. When I type adguard.costxforbreakfast.com (my a record), it comes in to my home network. Synology NAS have a reverse proxy setup: Source: HTTPS adguard.costxforbreakfast.com 443 then I have my destination IP(adguard) and port 80. But somehow it won't open it :( Could not find anything relevant over the web. How did you solve your reverse proxy with this setup?

[@WunderTechTutorials]

@@dennisyildirim2708 If we take a step back, are you trying to access AdGuard's web interface externally, or use AdGuard as your external DNS server? If so, you will have to use port 53 (that's the DNS port) as opposed to port 80. As for the reverse proxy, what are you using in the destination?

[@mathiasmuller741]

What about ipv6? is there maybe an additional tutorial video for this?

[@WunderTechTutorials]

I unfortunately don't have IPv6 from my ISP so I'm not entirely sure how it will work, but I imagine it will be similar.

[@jasontian9450]

is there a way to use portainer to deploy this?

[@WunderTechTutorials]

Yes, Portainer is just for Docker management so the screens will look slightly different, but you'll be able to set it up with Portainer if you'd like.

[@rastiosk7003]

hi new synology software 7.2.1 update 4 doesn't have option to select ag network and ag bridge you can only select one option.

[@WunderTechTutorials]

In the network tab after creating the container, edit the network you want to add and you can add it to the container.

[@robbybob]

keep getting ERR_CONNECTION_TIMED_OUT in my browser when trying to launch adguard from address bar. The container is running in docker just fine...

[@WunderTechTutorials]

Are you running Synology's Firewall? If you are, is there an allow rule for the correct port? If you're not, are you using HTTP or HTTPS in the URL?

[@jrfalk6028]

Is there an updated guide by any chance? That includes specified network for this container, it's the first option when setting up the container. I have now have bridge/bridge, AG_Network/macvlan, and AG_Bridge/bridge. I also don't have the option to add folders in the Advanced Settings. My only options are Environment, Links and Execution Command.

[@WunderTechTutorials]

The guide is still the same, but Synology released an update that changed the whole UI of Docker. This video goes over the changes and will hopefully help you see where the sections were/are, but I'm slowly trying to update the written articles on my website to reflect the updates. kzbin.info/www/bejne/qoiWZqB5eJd4g68

[@jrfalk6028]

@@WunderTechTutorials Thanks for the quick reply! I'm glad you have a new video which explains the differences. For anyone else that might reference this video, it looks like you can completely skip the advanced settings, at least for DMS 7.2. I'll give this a try. Thanks again for your quick response and all your help!

[@jrfalk6028]

I apologize, but does this mean I created / attempted to create the maclan on the wrong network port/device: Start container AdGuardHome failed: {"message":"failed to create the macvlan port: device or resource busy"} I have to disable Enable Open vSwitch, which isn't ideal becuase I cannot have Virtual Machine Manager installed.

[@WunderTechTutorials]

@@jrfalk6028 I haven't tried running both at the same time, but yes, that does make sense. Do you have two ports on your NAS and if so, can you plug in a second ethernet cord and use the other interface name?

[@jrfalk6028]

@@WunderTechTutorials I believe I do, but would have to confirm. As it is now, AdGuard is up and running after turning off the Open vSwitch. If I do go down that road, do I have to do anything with the initial macvlan I setup? Is there a way to rollback what I did during the putty setup? (Would I have too?) I will check the NAS later tonight. Your help is greatly appreciated!!!

[@BillCClinton]

Synology makes docker so ridiculously complicated. I followed the tutorial and get an error concerning the macvlan network. Delete container and move on......

[@silver33]

Is this pretty much the same on a Qnap NAS?

[@WunderTechTutorials]

The Docker part will be similar but a different UI. I'm not sure how macvlan network interfaces work on QNAP's, but I imagine it's similar (if it's supported on the device).

[@otisobl]

I undestand that this is a very specific question, but does anyone happen to know whether this is going to help me to get rid of ads when I use my YT app on my SmartTV? I am currently running PiHole and unfortunately, the damn ads are still happening every couple of minutes. It's super annoying.

[@WunderTechTutorials]

Unfortunately, none of these DNS ad blockers (AdGuard Home or Pi-hole) are very good versus KZbin video ads. There are blocking lists you can subscribe to that promise to block these ads, but they don't work particularly well in my experience.

[@otisobl]

@@WunderTechTutorials Thank you very much for your quick reply. :-) I will check out list subbscription. Hope it works! I hate advertisement like the plague.

[@chickennugget3362]

I'm using a link aggregation bond, so rather than eth0 im using bond0. Sadly i get the following error: Error response from daemon: invalid subinterface vlan name ovs_bond0, example formatting is eth0.10 Anyone have any ideas?

[@WunderTechTutorials]

Is it listed as ovs_bond0 exactly, or is there anything else to it?

[@chickennugget3362]

@@WunderTechTutorials Thanks for your reply! Mine just says bond0 docker0 eth0 eth1 & lo Its doesnt say ovs, I was just copying what you typed in the video. Great content by the way!

[@chickennugget3362]

So i took the ovs out and it worked lol Sorry for being retarded

[@WunderTechTutorials]

@@chickennugget3362 Thanks! In that case, you want to use the exact name, so bond0.

[@WunderTechTutorials]

@@chickennugget3362 This video should help! kzbin.info/www/bejne/qoiWZqB5eJd4g68

[@BrazenNL]

Wow, this didn't age well. Seems the new container manager messed things up.