No wizard on port 3000
Your password and your username (admin unless you choose another) go in before the first boot.
AdGuard Home 0.107.79 Networking
Free credit available Limited time
AdGuard Home VPS Ads and trackers blocked on every device, at home or away, on DNS no stranger canย use.
Selfhost.dev offers one-click AdGuard Home VPS hosting on a dedicated server we provision, secure and run, with plain DNS answering only the IP addresses you allow and a private DNS-over-HTTPS address for your devices away from home.
No firewall rules to write, no wizard to race and no port 53 left open.
AdGuard Homeone-click template ready
- dns filterAdGuard Home v0.107.79
- plain DNSyour IPs only
- private DNSDNS over HTTPS
- sign-inadmin + your password
- setup wizardnone to claim
European 4 GB server$0.02/hr
In one line
What is a self hosted AdGuard Home VPS on Selfhost.dev?
What it is
AdGuard Home is an open source DNS server that blocks ads and trackers for every device that uses it. This template runs it on a server of your own, reachable from anywhere.
Where to start. Open the console with AdGuard Home selected
Who it is for
Anyone who wants ad blocking on phones and laptops away from home, without a Raspberry Pi to look after.
When to use it
When you want protection outside your home network and would rather not secure an open DNS port yourself.
Server
AdGuard Home VPS, never an open resolver
Every AdGuard Home VPS guide carries one warning: a public port 53 invites amplification attacks, so firewall it. Here the lock ships with the server: plain DNS answers the IPs you allowed and drops everyone else.
The stack, end to end
Callers
Your devices
Edge
DoH, DNS :53
Your project server
Container
AdGuard Home
Access
IP allow-list
Away from home
DoH address
To sign in
Your admin
| AdGuard Home on a bare VPS | AdGuard Home VPS on Selfhost.dev |
|---|---|
| Install it by script or Docker | AdGuard Home running when the deploy finishes |
| Open port 53, then firewall it with UFW or iptables | Port 53 answering only the IPs you allowed |
| Get a domain and a certificate for encrypted DNS | A private DNS-over-HTTPS address, ready to paste |
| Claim the setup wizard before anyone else does | Your admin login, written before the first boot |
Port 53 for the IPs you list; the private address for everywhere else. Deploy the stack
Docker
AdGuard Home Docker, with no setup wizard to claim
AdGuard Home Docker guides map a dozen ports, then send you to port 3000 to finish a setup wizard. On a public server, that wizard belongs to whoever opens it first. Here your login is in place before it starts.
No port list to write
The compose file is ours: port 53, the HTTPS panel and the IP allow-list are set for you.
No certificate to fetch
The web panel and the private address are on HTTPS from the start.
What you need
AdGuard Home VPS requirements
AdGuard Home itself is light: guides run it on 512 MB. Here it runs on the smallest server we offer, 4 GB on x86 or ARM.
What it needs
- Server
- 4 GB, the smallest server we offer; x86 or ARM
- Admin login
- admin or a username you choose; a password of 12+ characters, at most 72 bytes
- Plain DNS clients
- Your current IP by default; add router or office IPs
- Devices away from home
- A browser or device that takes a DNS-over-HTTPS address
Server size: 4 GB, enough for AdGuard Home. Deploy on a 4 GB server
Quickstart
Set up an AdGuard Home VPS in 3 steps
Launch, sign in, point your devices.
-
Launch the template
Keep admin or pick a username, set a 12+ character password and check the IPs allowed to use plain DNS. The template deploys in about ten minutes.
-
Sign in
Open the HTTPS address the console shows and sign in to AdGuard Home's dashboard.
-
Point your devices
Paste the private DNS-over-HTTPS address into each browser or phone. For the whole house, set your router's DNS to the server's IP.
Deploy AdGuard HomeStep 1 starts in the console.
Launch AdGuard Home Billing
AdGuard Home VPS cost
An AdGuard Home VPS here is one server billed by the hour from prepaid credits: $0.02/hr for a European 4 GB server, about $15 to $16 a month.
| Item | Cost |
|---|---|
| The AdGuard Home template | $0 |
| Each device that uses it | $0, no per-device fee |
| Bandwidth for DNS traffic | $0, included in the server price |
| Optional daily backups | +20% of the server price |
| Server | RAM, cores, disk | Where | Rate | About a month |
|---|---|---|---|---|
cx23 (recommended) | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $15.18 |
cax11 (ARM) | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $16.35 |
cpx21 | 4 GB, 3 cores, 80 GB | US | $0.12/hr | $87.75 |
cpx22 | 4 GB, 2 cores, 80 GB | Singapore | $0.10/hr | $72.56 |
cx33 (more room) | 8 GB, 4 cores, 80 GB | Europe | $0.03/hr | $23.36 |
Monthly figures assume 730 hours. The US and Singapore servers need a first top-up.
If your balance reaches zero
With a card on file or a past top-up, AdGuard Home runs for 5 more days after your balance reaches zero, then stops. Top up within 24 hours to restart it; after that it is deleted, with a 14-day copy you can restore. Welcome-credit-only servers are deleted at zero.
Price a bigger server for AdGuard Home and the apps beside it in the calculator, no signup.
DoH
AdGuard Home cloud DNS over HTTPS
AdGuard Home in the cloud must encrypt DNS for devices outside your home; guides do it with a domain and a certificate. This template hands you a private DNS-over-HTTPS address instead.
Works on any network
Paste it into a browser's secure DNS setting or any phone or app that takes one. Attach your own domain and the address works on it too.
The secret is the lock
The ID at the end of the address lets a device in. Treat it like a password and give it only to your own devices.
Plain DNS for the house
Point your router at the server's IP on port 53 to cover TVs and consoles, once its IP is allowed.
Status
Five checks before your first DNS query
- Every service is health-checked every 60 seconds.
- A stalled deploy is retried automatically, so you never begin again from the template.
- Done means the panel answers, not just that a container started.
- No open resolver. Plain DNS drops every address you did not allow.
- You see the release it runs. The console flags Update available when a newer one ships.
~10 min to deploy
The console estimates about ten minutes for the AdGuard Home template after the server is ready; first-time server provisioning adds time.
Notes
AdGuard Home VPS limitations
- Plain DNS is IPv4 only. Port 53 has no IPv6 listener, so point routers and devices at the server's IPv4 address.
- Plain DNS follows your IP list. If your home IP changes, add the new one under Settings, DNS settings, Access settings.
- One per project. DNS port 53 is fixed on the server. Filters and the query log stay across restarts and redeploys; deleting the service ends its private address and resets them.
Nothing here in your way? The template deploys in about ten minutes.
Launch AdGuard Home Planning
Filtering for a family or an office?
Tell us how many devices and places to cover. We reply with the server we would choose and its monthly cost.
Help
Frequently asked questions
Is AdGuard Home on a VPS an open resolver?
Not on this template. Plain DNS on port 53 answers only the IP addresses you allowed at deploy (your current IP unless you listed others) and drops the rest. That closes the amplification risk guides warn about. Devices away from home use the private DNS-over-HTTPS address, not an open port.
How do my devices use AdGuard Home?
Two ways. Put the private DNS-over-HTTPS address into a browser's secure DNS setting or a device that takes one, which works from anywhere. Or point a router or device at the server's IP on port 53, which answers only the addresses you allowed. Add more in AdGuard Home under Settings, DNS settings, Access settings.
What is the AdGuard Home default login?
A fresh install has none: the first visitor to port 3000 creates the admin in a setup wizard. On this template the username is admin unless you choose another. You set a password of 12 or more characters at deploy. Both are written in before AdGuard Home first starts.
Is AdGuard Home free?
Yes. AdGuard Home is open source under the GPL 3.0 license, so the software costs nothing and nothing is charged per device. You pay for the server alone, by the hour from prepaid credits, at the rates in the cost table. Pointing more devices at it adds nothing.
Is AdGuard Home better than Pi-hole?
Both block ads and trackers over DNS. AdGuard Home builds encrypted DNS into the same program, where Pi-hole needs a separate tool for it. That built-in DNS over HTTPS is what gives this template a private address your phone can use on any network, with no app to install.
Ad blocking for every device you own. On DNS no stranger can use.
- AdGuard Home on a server of its own
- Port 53 for your IPs, DNS over HTTPS for the rest
- A European 4 GB server, about $15 to $16 a month
About Selfhost.dev
Selfhost.dev is a managed self hosting platform for developers and small teams. Open source apps and databases on dedicated servers you control, billed by the hour, in six locations across three continents.
Best for: Private DNS beside a VPN, a password manager and file storage, plus managed PostgreSQL, MySQL and Redis.