AdGuard Home paired with a private Unbound resolver: network wide ad and tracker blocking with recursive, DNSSEC validated DNS you fully control.
AdGuard Home is an open source, network wide DNS server that blocks ads, trackers and malicious domains for every device that points its DNS at it, with filtering rules, per client controls, query logging and a web dashboard. This image pairs it with Unbound, a validating, recursive, caching DNS resolver, configured as AdGuard's private upstream. Instead of forwarding your queries to a third party public resolver, every lookup is resolved directly from the DNS root servers with DNSSEC validation, so no external DNS provider sees your browsing and answers are cryptographically verified. It suits homes and offices that want private, self hosted, filtered DNS with no reliance on an outside resolver.
cloudimg delivers AdGuard Home and Unbound fully installed and wired together, so the dashboard answers and DNS filters the moment the instance finishes its first boot, with AdGuard already pointed at the loopback Unbound resolver. The image is secure by default: a unique administrator password is generated on each instance's first boot and written to a root only file, and the admin interface is not exposed on the network until it has been provisioned and password protected, so no default login ever ships and no one can claim the instance by reaching it first. The base is fully patched with unattended security upgrades enabled, DNS state lives on a dedicated data volume, and every deployment is paired with a step by step deploy guide, backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.