version: '3'
services:
coredns:
image: coredns/coredns
container_name: coredns
restart: always
volumes:
- /home//Documents/docker/coredns/:/root/
ports:
- "53:53/udp"
command: -conf /root/Corefile
This should do it.
Modem-ethernet to main deco-ethernet to slave deco in basement-ethernet to PC
Yes this would work just fine as you are hoping, also if you only need/want two units the Deco XE75 is a $100 off right now making it 200 usd, but the m4 would be a great choice too, you just get Wifi 6E with the 75s.
No. Just VPN in and SSH in.
You can turn off DHCP on your xfinity router and turn on dhcp on pihole, once you do this all devices will use pihiole for dhcp and dns.
https://docs.linuxserver.io/images/docker-swag/
I would tell you to entertain swag, has a lot of pre-built configs and has some integration with crowdsec and docker mods.
Clients just work, no matter what I have tried with the jellyfin client on android tv it always fails on first or second load up, also subtitles never quite work as smoothly as they could.
You can download movies or tv shows from your library so you could watch them while without internet, nice for road trips or flights.
Also I use https://trash-guides.info/ for all my setup for subtitles and no matter what I tweak they just are always a little off with jellyfin, no so with plex.
I just switched with this latest sale to plex from jellyfin and here is so far as to why.
To add about my server, it is a xeon 1231 v3, 32gb ram, 20tb raidz1 and a nvidia p2000 on a 200/200 fiber connection (using pfsense).
No you cannot, it is going to be a max of 2.5G coming in, ideally you’d want a 10G in and 1G to each port, what this does is allows TEN devices to run at a full 1G, this is a more reasonable scenario for a home user.
Your still going to probably need either a prosumer router and probably a prosumer switch like mikrotik/unifi/omada to get what you want out of this.
Something like this: https://mikrotik.com/product/rb4011igs_rm would get you 10G in and 1G out to each as I suggested.
I run pfsense which has unbound build in which I forward to nextdns for adblocking/malware, also there server(s) are relatively close so I get under 20ms.
For a couple other homes I manage I have unbound installed on two of the raspberry pi’s the host the controllers at their homes and just forward to nextdns under their own profile, one user uses their nextdns cli client but I plan to move them to unbound the next time I am here.
I use pfsense which has geoip blocking, however this is only going to be a threat if you have open ports, most if not all firewalls are default deny, so what I do is only allow North America and South America (family there).
I might suggest just looking at crowdsec.
If all you want to do is forward to google and redirect internally just use unbound or knot.
I self host vaultwarden but I also pay teh $10/year to support the project, I self host for Collections and I use the paid bitwarden at work since they do not allow ddns addresses in our network.
As long as passwords are strong it’s usually fine, I use ldap through jellyfin on authentik and everyone gets a passphrase.
Between them Immich is a lot easier to use, the app is much nicer I have found.
Also if you are not using nextcloud for other features, installing just for photos is a huge drag on resources.
Also immich just added gpu support.
They install just like any other container.
I just use hotio suite which has been great, I run bazarr, prowlarr, qbitmanage, qbittorrent, radarr, sonarr, sabnzbd, and unpackerr on an old asustor nas.
Adguard !== uBlock
One is per device based and the other is solely for DNS blocking, they compliment each other.
This was your solution, if that is not an option than there is no solution.