From 54d5c5599af1fbaa939ecb4958dc9e1a94ce92f9 Mon Sep 17 00:00:00 2001
From: "Trez.One" <charish.patel@trez.wtf>
Date: Fri, 10 Oct 2025 20:59:17 -0400
Subject: [PATCH] Updating DNS and DHCP config for AdGuard.

---
 .../rikku/adguard/conf/AdGuardHome.yaml.j2    | 30 +++++++++++++++----
 1 file changed, 24 insertions(+), 6 deletions(-)

diff --git a/app-configs/rikku/adguard/conf/AdGuardHome.yaml.j2 b/app-configs/rikku/adguard/conf/AdGuardHome.yaml.j2
index 5c85fde..320e641 100644
--- a/app-configs/rikku/adguard/conf/AdGuardHome.yaml.j2
+++ b/app-configs/rikku/adguard/conf/AdGuardHome.yaml.j2
@@ -26,10 +26,27 @@ dns:
   ratelimit_whitelist: []
   refuse_any: true
   upstream_dns:
-    - 192.168.1.254
+    - 94.140.14.14
+    - 94.140.15.15
+    - https://dns.adguard-dns.com/dns-query
+    - tls://dns.adguard-dns.com
+    - quic://dns.adguard-dns.com
+    - 1.1.1.1
+    - 1.0.0.1
+    - 1.1.1.2
+    - 1.0.0.2
+    - 185.228.168.9
+    - 185.228.169.9
+    - 76.76.2.3
+    - tls://getdnsapi.net
+    - 185.49.141.37
+    - tls://dot.seby.io
   upstream_dns_file: ""
   bootstrap_dns:
-    - 1.1.1.1
+    - 9.9.9.10
+    - 149.112.112.10
+    - 2620:fe::10
+    - 2620:fe::fe:10
   fallback_dns: []
   upstream_mode: load_balance
   fastest_timeout: 1s
@@ -72,7 +89,7 @@ dns:
   pending_requests:
     enabled: true
 tls:
-  enabled: false
+  enabled: true
   server_name: ""
   force_https: false
   port_https: 443
@@ -83,8 +100,8 @@ tls:
   allow_unencrypted_doh: false
   certificate_chain: ""
   private_key: ""
-  certificate_path: ""
-  private_key_path: ""
+  certificate_path: /opt/adguardhome/certs/live/trez.wtf/priv-fullchain-bundle.pem
+  private_key_path: /opt/adguardhome/certs/live/trez.wtf/priv-fullchain-bundle.pem
   strict_sni_check: false
 querylog:
   dir_path: ""
@@ -120,7 +137,8 @@ dhcp:
     range_end: 192.168.1.254
     lease_duration: 86400
     icmp_timeout_msec: 1000
-    options: []
+    options:
+      - '6 ips 192.168.1.254,192.168.1.252'
   dhcpv6:
     range_start: ""
     lease_duration: 86400