在内网搭建AdGuard Home

前言

突然发现抽屉里还有之前巨亏买的酷友的三手破电脑，最近才把他刷成Ubuntu22系统，让他锻炼一下，不然吃灰就可惜了。
今天我在想如何让他担负更多任务时无意间发现了DNS这个问题，正巧可以用来装一个AdGuard Home上去来过滤广告啥的，也正好应对Chrome Manifest V3这个NT条款。
但我担心可能延迟会有点高在1~4ms左右，因为那破电脑只能连WIFI（哪天捡垃圾捡个USB网卡装上看看）

本人环境

服务器系统：Ubuntu 22
路由器系统：OpenWrt

教程

下载和启动AdGuard Home

Linux x86_64下载和启动（若无sudo可去掉sudo）

wget https://static.adguard.com/adguardhome/release/AdGuardHome_linux_amd64.tar.gz
tar xvf AdGuardHome_linux_amd64.tar.gz
cd AdGuardHome
sudo chmod u+x AdGuardHome
sudo ./AdGuardHome -s install

输入uname -a来查看是否为x86_64

1 2	root@q:~# uname -a Linux q 5.15.0-56-generic #62-Ubuntu SMP Tue Nov 22 19:54:14 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

下载&启动过程

root@q:~# wget https://static.adguard.com/adguardhome/release/AdGuardHome_linux_amd64.tar.gz
--2022-12-28  14:17:19--  https://static.adguard.com/adguardhome/release/AdGuardHome_linux_amd64.tar.gz
Resolving static.adguard.com (static.adguard.com)... 84.17.57.7, 84.17.57.3
Connecting to static.adguard.com (static.adguard.com)|84.17.57.7|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11631231 (11M) [application/octet-stream]
Saving to: ‘AdGuardHome_linux_amd64.tar.gz’
AdGuardHome_linux_amd64.tar.gz 100%[===========================================================================================================================================>] 11.09M  2.32MB/s in  6.4s 
2022-12-28  14:17:27 (1.72 MB/s) - ‘AdGuardHome_linux_amd64.tar.gz’ saved [11631231/11631231]
root@q:~# tar xvf AdGuardHome_linux_amd64.tar.gz
./AdGuardHome/
./AdGuardHome/AdGuardHome
./AdGuardHome/LICENSE.txt
./AdGuardHome/AdGuardHome.sig
./AdGuardHome/README.md
./AdGuardHome/CHANGELOG.md
root@q:~# ls
AdGuardHome  AdGuardHome_linux_amd64.tar.gz  go  snap
root@q:~# cd AdGuardHome
root@q:~/AdGuardHome# chmod u+x AdGuardHome
root@q:~/AdGuardHome# ./AdGuardHome -s install
2022/12/28  14:18:09 [info] AdGuard Home, version v0.107.21
2022/12/28  14:18:09 [info] service: control action: install
2022/12/28  14:18:10 [info] service: started
2022/12/28  14:18:10 [info] Almost ready!
AdGuard Home is successfully installed and will automatically start on boot.
There are a few more things that must be configured before you can use it.
Click on the link below and follow the Installation Wizard steps to finish setup.
AdGuard Home is now available at the following addresses:
2022/12/28  14:18:10 [info] Go to http://127.0.0.1:3000
2022/12/28  14:18:10 [info] Go to http://[::1]:3000
2022/12/28  14:18:10 [info] Go to http://192.168.43.118:3000
2022/12/28  14:18:10 [info] service: action install has been done successfully on linux-systemd
root@q:~/AdGuardHome#

之后按照上方给的地址前往http://192.168.43.118:3000安装（这是本人的地址，请根据实际情况访问）

安装AdGuard Home

访问后来到这个界面，然后点击开始配置（每次完成相关设置后划到底部点击绿色按钮进行下一步，由于截图时的疏忽忘记完整截了）

到了这个界面建议修改网页管理界面的端口，这是你访问管理后台的端口，不改的话默认为80端口，本人后面通过修改安装目录下的AdGuardHome.yaml配置文件将端口改为了3000

然后你会发现DNS服务器下方有一条红色字，这意味着当前53端口默认被Ubuntu占用（这里只演示的系统为Ubuntu），你可以点击蓝色文字跳转到官方的修复教程，按照相关步骤执行后刷新页面即可。

修复过程

root@q:~/AdGuardHome# lsof -i :53
COMMAND    PID            USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
systemd-r 1522 systemd-resolve 13u IPv4 27654 0t0  UDP localhost:domain 
systemd-r 1522 systemd-resolve 14u IPv4 27655 0t0  TCP localhost:domain (LISTEN)
root@q:~/AdGuardHome# mkdir -p /etc/systemd/resolved.conf.d
root@q:~/AdGuardHome# nano /etc/systemd/resolved.conf.d/adguardhome.conf
root@q:~/AdGuardHome# mv /etc/resolv.conf /etc/resolv.conf.backup
root@q:~/AdGuardHome# ln -s /run/systemd/resolve/resolv.conf /etc/resolv.conf
root@q:~/AdGuardHome# systemctl reload-or-restart systemd-resolved

完成后来到这个界面，输入用户名和密码然后下一步

然后到这个界面，就是提醒你修改设备的DNS为当前IP。

之后下一步就是一个安装完成的界面，这里没截图。然后访问安装地址登入即可。

添加规则

规则可以去网上查找，这里分享本人使用的拦截规则

点击顶部菜单栏的过滤器然后选择DNS 拦截列表，再点击底部添加阻止列表

1	https://raw.githubusercontent.com/privacy-protection-tools/anti-AD/master/anti-ad-easylist.txt

注意规则不要添加太多，否则可能会轻微影响解析速度

DOH&DOT设置

自行研究了一下，首先你需要拥有一个域名和一个SSL证书（这里不做演示）
域名和SSL里的域名必须相同，且为域名添加服务器IP的解析，否则无法正常使用

前往设置->加密设置

只需要更改以下设置

1
2
3

服务器名称
HTTPS 自动重定向
证书

服务器名称填写域名，不要带http/https
HTTPS 自动重定向打上勾
证书按照相关位置填上保存即可