Allow DoH without exposing Web GUI over https #4549

New issue

Closed

opened 2026-03-04 05:14:59 -05:00 by deekerman · 1 comment

deekerman commented

2026-03-04 05:14:59 -05:00

Owner

Originally created by @pwsnla on GitHub (Jun 28, 2023).

Prerequisites

I have checked the Wiki and Discussions and found no answer
I have searched other issues and found no duplicates
I want to request a feature or enhancement and not ask a question

The problem

I would like to allow AGH to accept DoH request on all interfaces but bind console/dashboard UI to internal network only. This does not seem possible right now since they both use the same https port. I know that I can do this by deploying a reverse proxy but I would prefer to avoid the complexity of doing this.

Proposed solution

Allow to designate https port for DoH only.

Alternatives considered and additional information

Setup NGINX as reverse proxy and handle the logic of allowing access to /dns-query location only within NGINX. I would like to avoid additional complexity of configuring reverse proxy.

Originally created by @pwsnla on GitHub (Jun 28, 2023). ### Prerequisites - [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer - [X] I have searched other issues and found no duplicates - [X] I want to request a feature or enhancement and not ask a question ### The problem I would like to allow AGH to accept DoH request on all interfaces but bind console/dashboard UI to internal network only. This does not seem possible right now since they both use the same https port. I know that I can do this by deploying a reverse proxy but I would prefer to avoid the complexity of doing this. ### Proposed solution Allow to designate https port for DoH only. ### Alternatives considered and additional information Setup NGINX as reverse proxy and handle the logic of allowing access to /dns-query location only within NGINX. I would like to avoid additional complexity of configuring reverse proxy.

deekerman

2026-03-04 05:14:59 -05:00

closed this issue
added the
duplicate
label

deekerman commented

2026-03-04 05:15:04 -05:00

Author

Owner

@ainar-g commented on GitHub (Jun 28, 2023):

Duplicate of #741

@ainar-g commented on GitHub (Jun 28, 2023): Duplicate of #741

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/AdGuardHome#4549

No description provided.

Rows
Columns