diff --git a/doc/ADMIN.md b/doc/ADMIN.md index af867ab..071f917 100644 --- a/doc/ADMIN.md +++ b/doc/ADMIN.md @@ -14,12 +14,12 @@ When disabled: When enabled: - YunoHost **will** check if the port 53 is accessible on Internet and warns you if not -- You need to **manually open port 53** of your router if you self-host at home! -- Public IP adresses **will** be added to the AdGuard Home configuration, so AGH will be able to bind to them +- ⚠️ You need to **manually open port 53** of your router if you self-host at home! +- Server's public IP adresses **will** be added to the AdGuard Home configuration, so AGH will be able to bind to them You need to know that if you expose your DNS server to Internet, anyone who knows your server's IP can make a DNS request to it. It *may be used* to perform [amplification attacks](https://en.wikipedia.org/wiki/Denial-of-service_attack#Amplification)! This risk is greatly minimized by the rate limiting setting, which is set to 20 requests per second per client by default: -Settings → DNS settings → DNS server configuration → Rate limit +`Settings → DNS settings → DNS server configuration → Rate limit` You can completely or almost completely reduce the risk of unauthorized use with the help of the [Allowlist section](#allowlist) further down in this documentation. diff --git a/doc/APPS.md b/doc/APPS.md index 85e785a..4229937 100644 --- a/doc/APPS.md +++ b/doc/APPS.md @@ -2,7 +2,7 @@ ## Android -To be completed by someone who uses an Android app +To be completed by someone who uses an Android app, feel free to contribute! ## Apple devices @@ -11,7 +11,7 @@ To be completed by someone who uses an Android app [AdGuard Home Remote](https://apps.apple.com/app/id1543143740) by [RocketScience IT](https://rocketscience-it.nl/) is compatible with Mac, iPhone, iPad and Watch. It is free with an in-app purchase of 6€ or US$5 to unlock some features. No ads, no tracking. -This app is for monitoring or configuring your AGH instance, not to use your AGH as a DNS server on your Apple device. +This app is for monitoring or configuring your AGH instance, not to use your AGH as a DNS server on your Apple device. See the section bellow for that! You can easilly configure this app: @@ -27,7 +27,7 @@ You can easilly configure this app: ### Secure DNS profile To use your AGH instance as the DNS server on your Apple device, you can generate an Apple 'Secure DNS profile'. -Note: as a more tech-savvy alternative to this tutorial, you can use [Secure DNS profile creator](https://dns.notjakob.com/index.html). +**Note:** as a more tech-savvy alternative to this tutorial, you can use [Secure DNS profile creator](https://dns.notjakob.com/index.html). To do so, you first need to activate the DNS over HTTP/TLS/QUIC functionnality using the YunoHost Webadmin. If you're reading this you should already be in the right page: just click the "AdGuard Home configuration" option at the top of this text, toggle on "Activate DNS over HTTP/TLS/QUIC?" then "Save". @@ -52,4 +52,4 @@ Finaly, open the system settings, click on the "Downloaded profile" message and Your device should now use your AdGuard Home instance as its DNS server. Congrats! -Note: Installed DNS profiles can be managed in the Settings under "General" then "VPN and Device Management". +**Note:** Installed DNS profiles can be managed in the Settings under "General" then "VPN and Device Management".