Pi-hole ve AdGuard Home Kurulumu: Ağ Genelinde Reklam Engelleme

# docker-compose.yml
version: '3.8'

services:
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "127.0.0.1:8080:80"
    environment:
      TZ: 'Europe/Istanbul'
      WEBPASSWORD: 'guclu-sifre'
      PIHOLE_DNS_: '1.1.1.1;8.8.8.8'
      DNSSEC: 'true'
      DNSMASQ_LISTENING: 'all'
    volumes:
      - ./pihole/etc-pihole:/etc/pihole
      - ./pihole/etc-dnsmasq.d:/etc/dnsmasq.d
    cap_add:
      - NET_ADMIN

# 53 portunu kullanan servisi durdur (Ubuntu)
sudo systemctl stop systemd-resolved
sudo systemctl disable systemd-resolved

# /etc/resolv.conf güncelle
echo "nameserver 8.8.8.8" | sudo tee /etc/resolv.conf

# Pi-hole başlat
docker compose up -d

version: '3.8'

services:
  adguardhome:
    image: adguard/adguardhome:latest
    container_name: adguardhome
    restart: unless-stopped
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "127.0.0.1:3000:3000"  # İlk kurulum
      - "127.0.0.1:8080:80"    # Web arayüzü
      - "853:853/tcp"           # DNS-over-TLS
      - "443:443/tcp"           # DNS-over-HTTPS
    volumes:
      - ./adguard/work:/opt/adguardhome/work
      - ./adguard/conf:/opt/adguardhome/conf

docker compose up -d
# İlk kurulum: http://SUNUCU_IP:3000

Router Yönetim Paneli → DHCP Ayarları
Primary DNS: SUNUCU_IP (Pi-hole/AdGuard IP)
Secondary DNS: 1.1.1.1 (yedek)

# Linux
sudo nano /etc/resolv.conf
nameserver SUNUCU_IP

# Windows (PowerShell)
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses SUNUCU_IP

Group Management → Adlists → Add

Popüler listeler:
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://adaway.org/hosts.txt
https://v.firebog.net/hosts/Easylist.txt
https://v.firebog.net/hosts/Easyprivacy.txt
https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt

# Gravity güncelle (listeleri yenile)
docker exec pihole pihole -g

Filters → DNS blocklists → Add blocklist

Önerilen listeler:
- AdGuard DNS filter (varsayılan)
- EasyList
- EasyPrivacy
- Malware Domains
- AdAway Default Blocklist

# Whitelist'e ekle
docker exec pihole pihole -w example.com

# Blacklist'e ekle
docker exec pihole pihole -b ads.example.com

# Regex blacklist
docker exec pihole pihole --regex '(^|\.)ads\..*'

# Listeleri görüntüle
docker exec pihole pihole -q example.com

Filters → Custom filtering rules

# Engelle
||ads.example.com^

# İzin ver (whitelist)
@@||example.com^

# Regex engelle
/^ads\..*/

Pi-hole: Settings → DHCP
- DHCP server enabled: Etkin
- Range: 192.168.1.100 - 192.168.1.200
- Router: 192.168.1.1
- Lease time: 24 saat

AdGuard Home: Settings → DHCP settings
- Enable DHCP server
- IP range: 192.168.1.100 - 192.168.1.200
- Gateway: 192.168.1.1

# AdGuard Home otomatik olarak destekler
# SSL sertifikası gerekir

Settings → Encryption settings:
- Enable encryption: Etkin
- Server name: dns.example.com
- HTTPS port: 443
- DNS-over-TLS port: 853
- Certificate: /opt/adguardhome/conf/cert.pem
- Private key: /opt/adguardhome/conf/key.pem

# docker-compose.yml'e ekle
cloudflared:
  image: cloudflare/cloudflared:latest
  container_name: cloudflared
  restart: unless-stopped
  command: proxy-dns --port 5053 --upstream https://1.1.1.1/dns-query
  network_mode: host

Pi-hole → Settings → DNS
Custom DNS: 127.0.0.1#5053

Pi-hole Dashboard: http://SUNUCU_IP/admin
- Toplam sorgular
- Engellenen sorgular (%)
- En çok engellenen domainler
- En aktif istemciler
- Zaman bazlı grafik

AdGuard Home Dashboard: http://SUNUCU_IP:8080
- DNS sorgu istatistikleri
- Engelleme oranı
- Üst engellenen domainler
- İstemci istatistikleri

server {
    listen 443 ssl http2;
    server_name dns.example.com;

    ssl_certificate /etc/letsencrypt/live/dns.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/dns.example.com/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}