Files
infrastructure/docs/06-CHANGELOG.md
XTRM-Unraid 09209bf863
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
docs: AdGuard Home on MikroTik - complete setup
- Replaced Pi-hole with AdGuard Home (172.17.0.5:5355)
- Configured DoH/DoT/DoQ with TLS certificates
- Added blocklists: StevenBlack, Hagezi Pro, Hagezi NSFW
- Added custom rules and 6 client devices
- Updated NAT rules for DNS redirect
- Documented MikroTik container root-dir bug
- Saved migration config for Unraid setup

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 11:44:24 +02:00

3.0 KiB

2026-01-22 - MikroTik DNS Migration to AdGuard Home

Pi-hole Removal from MikroTik

  • [CONTAINER] Removed Pi-hole container from MikroTik
  • [STORAGE] Freed internal flash storage
  • [CLEANUP] Removed Pi-hole mounts, envs, and data

AdGuard Home Installation (Multiple Attempts)

  • [ISSUE] MikroTik container root directory disappears on stop (bug)
  • [WORKAROUND] Use DNS port 5355 to avoid stats.db creation error
  • [CONTAINER] Final working config: usb1/agh2 root-dir, no mounts
  • [VERSION] AdGuard Home v0.107.71

Configuration Applied via API

  • [BLOCKLISTS] StevenBlack Hosts, Hagezi Pro, Hagezi NSFW
  • [RULES] Custom blocks: SentinelOne, Jamfcloud domains
  • [CLIENTS] 6 devices migrated from Pi-hole
  • [TLS] Let's Encrypt wildcard cert (*.xtrm-lab.org)

Encrypted DNS Services

  • [DOH] Port 443 - Active
  • [DOT] Port 853 - Active
  • [DOQ] Port 8853 - Active
  • [SERVER] dns.xtrm-lab.org

NAT Rules Updated

  • [NAT] DNS Force: 53 → 172.17.0.5:5355 (UDP/TCP)
  • [NAT] Web UI: 80 → 172.17.0.5:80
  • [NAT] DoT: 853 → 172.17.0.5:853
  • [NAT] DoH: 443 → 172.17.0.5:443

Migration Data Saved

  • [FILE] /mnt/user/appdata/adguard-migration.json
  • [DATA] Blocklists, rules, clients for future Unraid migration

Known Issues

  • [BUG] MikroTik container root-dir disappears on stop - DO NOT RESTART
  • [INCOMPATIBLE] nebula-sync crash-looping (Pi-hole ↔ AdGuard incompatible)

2026-01-21 - Rclone & Cloud Backup Setup

Rclone Installation & Configuration

  • [SERVICE] Installed rclone on Unraid
  • [CONFIG] Configured Google Drive remote (drive:)
  • [SYNC] Initial sync completed for backup folders

Flash Backup Updates

  • [SCRIPT] Updated flash-backup script output path
  • [PATH] Changed from /mnt/user/backup/unraid-flash to /mnt/user/Backup/unraid-flash
  • [SYNC] Synced to drive:Backups/unraid-flash (371 MiB)

2026-01-21 - Pi-hole Version Sync Automation

MikroTik Pi-hole Update

  • [CONTAINER] Updated MikroTik Pi-hole to v6.4.1 (matching Unraid)
  • [CONFIG] Enabled FTLCONF_webserver_api_app_sudo=true for nebula-sync
  • [FIX] Resolved nebula-sync crash loop (was failing with HTTP 400)

Version Sync Script

  • [SCRIPT] Created pihole-version-sync User Script
  • [SCHEDULE] Runs daily at 4:00 AM
  • [PATH] /boot/config/plugins/user.scripts/scripts/pihole-version-sync/

2026-01-19 - Phase 8 Enhanced Network Mapping

MikroTik DHCP Sync

  • [SCRIPT] Created mikrotik_dhcp_to_netbox.sh
  • [SYNC] 29 DHCP leases synced to NetBox IPs

Slurpit Plugin Installation

  • [PLUGIN] Installed slurpit_netbox v1.2.7
  • [CONFIG] Plugin configuration at /mnt/user/appdata/netbox/config/plugins.py

2026-01-18 - Phase 7 Gitea & Woodpecker CI

Gitea Setup

Woodpecker CI

  • [SERVICE] woodpecker-server and woodpecker-agent deployed
  • [URL] https://ci.xtrm-lab.org
  • [AUTH] Integrated with Gitea OAuth2

Previous Changes

See git history for earlier changes.