Private servers on the LAN are resolved by BIND, and an ADGuard Home server is used as forwarder for everything else. I've done almost exactly what you've described: using bind (though in my case I use both bind, and also free-ipa, which run a bind under the hood to provide DNS) to my home LAN. Please can someone say if this is possible or if I need to change my topology etc? Any pointers would be much appreciated. Is anyone able to walk me through this setup in order to retrieve the two files necessary for. I followed the setup guide on the Github docs however I am stuck on following the certbot's instructions after posting this command sudo certbot certonly -manual -preferred-challengesdns. You get many DNS resolution solutions, such as DNS over TLS, DNS over HTTPS, and DNS over QUIC, within one single project. Hello, I am looking for assistance setting up DNS-over-HTTPS. Instead I want DNS queries (if passed upstream by my Bind9 Server) to be passed over DNSSEC (or DNS over TLS) to my AdGuard VM for secure ad blocking and encypted public queries. Of the open source DNS options I've used, Adguard Home is the easiest to set up and maintain. My Current DNS query path is Netowrk 192.168.0.0/24 > 192.168.0.253 Bind9Server (This handles requests for A records and CNAMES etc for private IP ranges, if not found is passed upstream) > 8.8.8.8 (Public DNS for anything outside my LAN) I'm currently running an Ubuntu Server VM on a Proxmox Host, running Bind9 DNS for my internal LAN (home lab), I want to setup AdGuard on a seprate VM and use DNSSEC or DNS over TLS for everything upstread of my bind9 box.

In the diagram I threw together the left hand side shows my current LAN's DNS query path, I would like to have it as shown on the right hand side with AdGuard and DNSSEC or DNS over TLS if possible I have a decent physical Proxmox host capable of having two separate VMs if needed, is this possible? Remote for AdGuard DNS makes managing your AdGuard DNS setup quick and easy.

Adguard home dns