project.md

${{ content_synopsis }} This image will run AdGuard-Home rootless and distroless, for maximum security and performance.

${{ content_uvp }} Good question! Because ...

${{ github:> [!IMPORTANT] }} ${{ github:> }}* ... this image runs rootless as 1000:1000 ${{ github:> }}* ... this image has no shell since it is distroless ${{ github:> }}* ... this image is auto updated to the latest version via CI/CD ${{ github:> }}* ... this image has a health check ${{ github:> }}* ... this image runs read-only ${{ github:> }}* ... this image is automatically scanned for CVEs before and after publishing ${{ github:> }}* ... this image is created via a secure and pinned CI/CD process ${{ github:> }}* ... this image runs a basic integration test before it will be published (or not if it fails) ${{ github:> }}* ... this image is very small ${{ github:> }}* ... this image creates a random password at start if none is set in the config ${{ github:> }}* ... this image supports inline configs

If you value security, simplicity and optimizations to the extreme, then this image might be for you.

${{ content_comparison }}

${{ title_config }}

${{ include: ./rootfs/adguard/etc/config.yaml }}

The default configuration contains no special settings, except ignoring the dnslookup health check in the statistics and as a client to not pollute your UI or statistics. Consider replacing it with your own or start the container with the default one and start changing what you need. The configuration will be updated with your settings if you use the mentioned volumes below. It is recommended to always add the exception for dnslookup. If using the default config, the container will set a new random password for the user admin at start and print it to the log only once!

clients:
  persistent:
    - name: dnslookup
      ids:
        - 127.0.0.1
      ignore_querylog: true
      ignore_statistics: true

${{ title_volumes }}

• ${{ json_root }}/etc - Directory of the configuration file
• ${{ json_root }}/var - Directory of database and query log files

${{ content_compose }}

${{ content_defaults }}

${{ content_environment }} | ADGUARD_CONFIG (optional) | Will overwrite the default config with the value of this variable if set (inline config) | |

${{ content_source }}

${{ content_parent }}

${{ content_built }}

${{ content_tips }}