That might explain the problem. Assuming adguard returns an nxdomain for blocked sites then the devices will try with their secondary DNS server and get to the blocked site

Sorry I misread your post. You shouldn’t need the 172 address in your DNS config, stick to the 127 address only.

In regard to the issue itself. Do your devices show their DNS server as the adguard server?

Your adguard config looks strange. The examples shown list different DNS providers but you have pointed it back at itself for its DNS. I don’t understand why you would do that.

I use Arch because it makes installing almost any software package trivially easy via the AUR and if you run into issues, the wiki is there to help.

Like the others, I suggest you stick to a distro designed for desktop use (Ubuntu, Fedora etc), you’ll have a much easier time.

If you really want to go with something closer to “scratch made” I’d recommend Arch. Its documentation is killer and you can build a system suited to your requirements.

I have a similar setup using Truenas to store data. I’ve setup a VM in Truenas that can access the data via NFS (easier to setup on Linux than SMB).

It’s nice to keep all your services contained in one machine, as long as it has enough resources, and will probably consume less power than running another PC.

I use qbittorrent, most people seem to agree it performs better than Transmission. It’s accessible from a web interface.

I just tried adding a native VPN and there’s no option to use Wireguard

You should try out KDE in a Live CD. The snapping and tiling features work very well, Windows needs to catch up

Pinhole has allowed custom local records for a very long time now

My method to get around this is setting up a specific user account for my TV. In the user options you can disable transcoding

It is paid for, with your time ;)

Higher end cable testers can show you where the break is, but it will be far more expensive that a new cable.

And if you’re looking for a way to simplify the setup process: borgmatic

It depends how valuable your data is, what backup strategy you have, and how long you’re prepared to wait to get access to your data when a drive fails.

Personally if/when I migrate my main dataset to SSD, I’ll stick with RAIDZ2/RAID6.

I came to Arch for the customisation, I stayed for the AUR

I’ve seen a few people recommending paperless-ngx

The way I justify self hosting is that every device I use it on has an offline backup so downtime isn’t overly important.

This is an interesting problem and probably one I will run into when I eventually divide my LAN into multiple vlans.

Unless traffic can be filtered based on hostname then the only solution I can think of is to run two instances of the proxy/ingress controller.

If you’re prepared for headaches at the start then switching over to a ingress controller is the way to go.

95% of my services run on a single IP address over Https with a valid certificate. I can add as many services as I want without worrying about IP conflicts or invalid certificates.