XTRM-Unraid
09209bf863
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
- Replaced Pi-hole with AdGuard Home (172.17.0.5:5355) - Configured DoH/DoT/DoQ with TLS certificates - Added blocklists: StevenBlack, Hagezi Pro, Hagezi NSFW - Added custom rules and 6 client devices - Updated NAT rules for DNS redirect - Documented MikroTik container root-dir bug - Saved migration config for Unraid setup Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
99 lines
3.0 KiB
Markdown
99 lines
3.0 KiB
Markdown
## 2026-01-22 - MikroTik DNS Migration to AdGuard Home
|
|
|
|
### Pi-hole Removal from MikroTik
|
|
- [CONTAINER] Removed Pi-hole container from MikroTik
|
|
- [STORAGE] Freed internal flash storage
|
|
- [CLEANUP] Removed Pi-hole mounts, envs, and data
|
|
|
|
### AdGuard Home Installation (Multiple Attempts)
|
|
- [ISSUE] MikroTik container root directory disappears on stop (bug)
|
|
- [WORKAROUND] Use DNS port 5355 to avoid stats.db creation error
|
|
- [CONTAINER] Final working config: usb1/agh2 root-dir, no mounts
|
|
- [VERSION] AdGuard Home v0.107.71
|
|
|
|
### Configuration Applied via API
|
|
- [BLOCKLISTS] StevenBlack Hosts, Hagezi Pro, Hagezi NSFW
|
|
- [RULES] Custom blocks: SentinelOne, Jamfcloud domains
|
|
- [CLIENTS] 6 devices migrated from Pi-hole
|
|
- [TLS] Let's Encrypt wildcard cert (*.xtrm-lab.org)
|
|
|
|
### Encrypted DNS Services
|
|
- [DOH] Port 443 - Active
|
|
- [DOT] Port 853 - Active
|
|
- [DOQ] Port 8853 - Active
|
|
- [SERVER] dns.xtrm-lab.org
|
|
|
|
### NAT Rules Updated
|
|
- [NAT] DNS Force: 53 → 172.17.0.5:5355 (UDP/TCP)
|
|
- [NAT] Web UI: 80 → 172.17.0.5:80
|
|
- [NAT] DoT: 853 → 172.17.0.5:853
|
|
- [NAT] DoH: 443 → 172.17.0.5:443
|
|
|
|
### Migration Data Saved
|
|
- [FILE] /mnt/user/appdata/adguard-migration.json
|
|
- [DATA] Blocklists, rules, clients for future Unraid migration
|
|
|
|
### Known Issues
|
|
- [BUG] MikroTik container root-dir disappears on stop - DO NOT RESTART
|
|
- [INCOMPATIBLE] nebula-sync crash-looping (Pi-hole ↔ AdGuard incompatible)
|
|
|
|
---
|
|
|
|
## 2026-01-21 - Rclone & Cloud Backup Setup
|
|
|
|
### Rclone Installation & Configuration
|
|
- [SERVICE] Installed rclone on Unraid
|
|
- [CONFIG] Configured Google Drive remote (drive:)
|
|
- [SYNC] Initial sync completed for backup folders
|
|
|
|
### Flash Backup Updates
|
|
- [SCRIPT] Updated flash-backup script output path
|
|
- [PATH] Changed from /mnt/user/backup/unraid-flash to /mnt/user/Backup/unraid-flash
|
|
- [SYNC] Synced to drive:Backups/unraid-flash (371 MiB)
|
|
|
|
---
|
|
|
|
## 2026-01-21 - Pi-hole Version Sync Automation
|
|
|
|
### MikroTik Pi-hole Update
|
|
- [CONTAINER] Updated MikroTik Pi-hole to v6.4.1 (matching Unraid)
|
|
- [CONFIG] Enabled FTLCONF_webserver_api_app_sudo=true for nebula-sync
|
|
- [FIX] Resolved nebula-sync crash loop (was failing with HTTP 400)
|
|
|
|
### Version Sync Script
|
|
- [SCRIPT] Created pihole-version-sync User Script
|
|
- [SCHEDULE] Runs daily at 4:00 AM
|
|
- [PATH] /boot/config/plugins/user.scripts/scripts/pihole-version-sync/
|
|
|
|
---
|
|
|
|
## 2026-01-19 - Phase 8 Enhanced Network Mapping
|
|
|
|
### MikroTik DHCP Sync
|
|
- [SCRIPT] Created mikrotik_dhcp_to_netbox.sh
|
|
- [SYNC] 29 DHCP leases synced to NetBox IPs
|
|
|
|
### Slurpit Plugin Installation
|
|
- [PLUGIN] Installed slurpit_netbox v1.2.7
|
|
- [CONFIG] Plugin configuration at /mnt/user/appdata/netbox/config/plugins.py
|
|
|
|
---
|
|
|
|
## 2026-01-18 - Phase 7 Gitea & Woodpecker CI
|
|
|
|
### Gitea Setup
|
|
- [SERVICE] gitea container deployed
|
|
- [URL] https://git.xtrm-lab.org
|
|
- [AUTH] Integrated with Authentik OAuth2
|
|
|
|
### Woodpecker CI
|
|
- [SERVICE] woodpecker-server and woodpecker-agent deployed
|
|
- [URL] https://ci.xtrm-lab.org
|
|
- [AUTH] Integrated with Gitea OAuth2
|
|
|
|
---
|
|
|
|
## Previous Changes
|
|
|
|
See git history for earlier changes.
|