George Sapkin 754a9908f4 adguardhome: run as an unprivileged user ...

Run AdGuard Home without superuser privileges, by granting the binary
capabilities through ujail.

AdGuard Home writes new config files, so it must have r/w access to the
directory where these files live. Which means existing configs must be
migrated to a new directory, /etc/adguardhome, by default.

CAP_NET_BIND_SERVICE and CAP_NET_RAW capabilities are based on the
official documentation linked below.

Link: https://github.com/AdguardTeam/AdGuardHome/wiki/Getting-Started#running-without-superuser-linux-only
Signed-off-by: George Sapkin <george@sapk.in>

2025-08-06 21:49:54 +08:00

..

adguardhome.config

adguardhome: run as an unprivileged user

2025-08-06 21:49:54 +08:00

adguardhome.defaults

adguardhome: run as an unprivileged user

2025-08-06 21:49:54 +08:00

adguardhome.init

adguardhome: run as an unprivileged user

2025-08-06 21:49:54 +08:00

adguardhome.json

adguardhome: run as an unprivileged user

2025-08-06 21:49:54 +08:00

adguardhome.sysctl

adguardhome: increase UDP send/receive buffers

2025-04-05 02:36:26 +08:00