A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS

Summary

A Guide For Wireguard VPN Setup With Pi-Hole Adblock and Unbound DNS Why Setup Wireguard Network with Pi-Hole Adblock and Unbound DNS I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my various devices on my network through simple addresses, such as http://emby.home.server. Enter Wireguard, Pi-Hole and Unbound. Of course, there are many tools that might achieve the same results with a lot less work, such as Tailscale. I would reach devices on the network easily, one of the nodes could be set to act as an exit node and you could also apply network-wide ad-block with Next DNS (I believe that is, at the time of writing, the solution they offer). Outside of Tailscale there are other fully open source alternatives, such as Headscale, Nebula and others. However, I chose to set up my own Wireguard network, as it gave me the opportunity to learn a lot and helped me better understand everything involved in the process. Network Setup and Clients For devices, I have the following configuration, and the below IPs will be used throughout the article. They represent a starting point, but should be sufficient for anyone to build their network according to their needs. VPN Server (10.10.10.1) - running on a VPS (Virtual Private Server) from a provider that meets my requirements (close physical proximity, high bandwidth and at least 1 Gbps transfer speeds) Home Server (10.10.10.10) - running on my home network and providing various service (media server, personal cloud, torrent client, etc.) Desktop (10.10.10.11) - running on my home network Laptop (10.10.10.12) - running on my home network, but might connect through outside networks (i.e.: coffee shops, libraries, airports, etc.) Mobile 1 (10.10.10.100) - running on my...