We have started private DNS Recursive for your AdGuard Home, PiHole, etc… This meant for DNS Resolver that not relying on Google, Cloudflare, etc…
Copy the Certificate to the Ubuntu Trust Store
In your AdGuard Box
nano /usr/local/share/ca-certificates/0_pururin.crtThen paste this and save
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----Update the System Certificate Store
Run the built-in Ubuntu command to rebuild the system’s trusted certificate bundle
update-ca-certificatesWhat to look for in the output
The terminal should output text confirming that certificates were added, looking similar to this
Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.Restart AdGuard Home
For AdGuard Home to pick up the newly trusted root certificate from the host operating system, restart the AdGuard service
systemctl restart adguard-homeIf you use Docker, restart it
Start using
Now your AdGuard Home can use Pururin DNS Recursive
IPv6
quic://[2402:4e20:b00b::1111]:853
quic://[2402:4e20:b00b::1001]:853tls://[2402:4e20:b00b::1111]:853
tls://[2402:4e20:b00b::1001]:853https://[2402:4e20:b00b::1111]:443/dns-query
https://[2402:4e20:b00b::1001]:443/dns-queryIPv4 (Limited)
quic://151.158.198.49:853
quic://151.158.198.49:8531tls://151.158.198.49:853
tls://151.158.198.49:8531Take note that Pururin DNS Recursive prefer IPv6 for all HTTPS, TLS and QUIC and Plain DNS
Fallback DNS servers
Just in case, add this Fall Back DNS
tls://1.0.0.1
tls://1.1.1.1
tls://dns10.quad9.net