webyhomelab/adblock-pd repository overview

⁠🛡️ ADBlock-Private-DNS (ADBlock-PD)

The ultimate, heavily hardened fork of AdGuard Home for those who demand absolute privacy.

⁠📸 Interface (Bento UI / Glassmorphism)

⁠🎯 What is this?

ADBlock-Private-DNS (ADBlock-PD) is a fork of the popular AdGuard Home DNS server (based on v0.107.74). Created by Weby Homelab, the sole purpose of this project is to completely sever all ties with AdGuard's infrastructure (and any other external entity). We took a powerful filtering engine and fully "sanitized" it.

Your DNS server should belong exclusively to you. No telemetry, no hidden requests, and no downloading of third-party code without your explicit consent.

⁠✨ Key Hardening Features

⁠🚀 Purged Updater (RCE Protection)

The original internal/updater module has been physically removed from the source code. The server will never ping static.adtidy.org to check for updates. This eliminates a potential Remote Code Execution (RCE) vector through compromised updates or malicious infrastructure.

⁠🔒 DNS Hardening & Zero Phone-Home

• SafeBrowsing & Parental Control: In the original version, these features send hashes of your queries to AdGuard servers. In ADBlock-PD, the suffixes are nullified, and requests are forcefully redirected to 127.0.0.1. The features are isolated.
• WHOIS Privacy: The built-in WHOIS client has been replaced with a dummy stub (whois.Empty). The IP addresses of devices in your network are never transmitted to external servers (e.g., whois.arin.net).

⁠🔇 Zero Telemetry & Rebranding

All links in the web interface (React) that led to AdGuard trackers, analytics, or external documentation have been replaced with neutral stubs. The project has received a new adaptive SVG logo and a complete visual identity overhaul.

⁠🔄 Self-Healing Architecture

The container is equipped with a built-in HEALTHCHECK based on the host utility. Every 30 seconds, the system verifies the vitality of the DNS resolver (127.0.0.1:53). If the service hangs, Docker will automatically restart it, guaranteeing a stable internet connection in your network.

⁠🐧 Lightweight & Secure Base

The final Docker image is based on debian:bullseye-slim. The service runs as an unprivileged user (UID 10001), utilizing the --no-permcheck flag for a secure startup in an isolated Docker environment. The default timezone is set to Europe/Kyiv.

⁠🚀 Deployment & Configuration

For a proper deployment (running Docker, completing the setup wizard, and installing SSL certificates for DoH/DoT/DoQ), please refer to our detailed guide:

📖 Complete Installation Guide (INSTRUCTIONS_INSTALL_ENG.md)⁠

⁠🛠 Building from Source

If you want to build the project yourself, you will need Docker (for the multi-stage build process).

git clone https://github.com/weby-homelab/adblock-pd.git
cd adblock-pd
docker build -t adblock-pd:local .

⁠📜 License & Disclaimer

This project is distributed under the GNU General Public License v3.0 (GPL-3.0). It is provided "AS IS". The Weby Homelab team assumes no liability for any network disruptions, data loss, or other consequences resulting from the use of this software.

Built in Ukraine under air raid sirens & blackouts ⚡
© 2026 Weby Homelab