RootGuard
1.0.1 · Publicly available

DNS protection for your entire home

Fewer ads.
More privacy.

RootGuard centrally protects every device on your network from ads and known trackers. One clear web interface brings AdGuard Home and Unbound together in Docker—without installing an extension on every phone, TV, or computer.

Try it now Open documentation
rootguard.local/dashboard
RootGuard Dashboard
ROOTGUARD CONTROL PANEL Your DNS path is protected.

AdGuard Home filters while Unbound resolves recursively with DNSSEC.

Configure Unbound →
✓PROTECTED192.168.1.10:53
DNS ENDPOINT192.168.1.10:53Address for your clients
SERVICES5 runningCore, WebApp, Updater, AdGuard, Unbound
DNSSECValidation activeSignatures are verified
FILTER CHAINConnectedNo external fallback
STACK CPU0,3 %
Min 0,1 %Max 0,6 %
STACK RAM157 MiB
Min 142 MiBMax 159 MiB
DNS QUERIES12.843
Min 9.204Max 12.843
BLOCKED2.118
Min 1.406Max 2.118
FILTER RATE16,5 %
Min 13,1 %Max 16,5 %
RUNTIME
RootGuard CoreHealthy
RootGuard WebAppHealthy
RootGuard UpdaterHealthy
AdGuard HomeHealthy
UnboundHealthy

Why RootGuard

Trust you can verify.

AGPL-3.0 · open source

Fully open source. Every line of code can be inspected and audited.

Runs in your own home

No cloud service, no telemetry. Your DNS queries never leave your network.

Signed & attested

Every release is verified via Cosign against real GitHub build provenance before activation.

DNSSEC

Unbound cryptographically validates every answer and rejects tampered signatures.

Quick Start · Ein Befehl

Up and running in minutes.

One computer on your home network is enough. The install script checks for Docker and installs it if needed (Debian/Ubuntu), downloads the ready-made release, generates both security keys automatically, and only asks for a WebGUI username and password.

  1. 01
    Check DockerInstalled automatically if missing.
  2. 02
    Set your loginOnly a username and password are asked for.
  3. 03
    Stack is runningOpen the web interface and follow guided setup.
Prefer step by step? Manual installation →
rootguard 
curl -fsSL https://raw.githubusercontent.com/foxly-it/rootguard/main/install.sh | bash
Then openhttp://localhost:8080/login

Live preview

Here's what the install looks like.

The installer prints real status messages - this is a faithful example session, not a polished marketing transcript. If Docker is already installed, that step is simply skipped.

rootguard — install.sh
$ curl -fsSL https://raw.githubusercontent.com/foxly-it/rootguard/main/install.sh | bash

>> Docker wurde nicht gefunden - Installation über Foxly dockerinstall wird gestartet.
>> Docker wurde installiert.

>> Ermittle die aktuelle RootGuard-Version…
>> Aktuelle Version: v1.0.1

Benutzername für die RootGuard-WebGUI [admin]: admin
Passwort für die RootGuard-WebGUI (leer = zufällig generieren): 

>> Starte den RootGuard-Stack…

>> Fertig! Öffne http://localhost:8080/login
>> Benutzername: admin
>> Generiertes Passwort (jetzt notieren, wird nicht erneut angezeigt): a41f0c9e7b2d8461

Live from the interface

This is what your DNS protection looks like.

Real screenshots of a running RootGuard 1.0 installation - no mockups.

rootguard.local/dashboard
RootGuard Dashboard mit Live-Status Unbound-Konfiguration mit Live-Diagnose AdGuard-Home-Verwaltung Stack & Updates mit Digest-Verifizierung

What RootGuard does for you

Simple protection for every device.

RootGuard combines proven open-source technology in one approachable interface. You stay in control without having to understand every technical detail.

Fewer distractions

Ads and known trackers are blocked centrally before they reach your devices.

Protects your queries

DNS queries are handled by your own stack and checked for tampering with DNSSEC.

Stays under your control

Dashboard, configuration, and updates run on your own Docker host.

Technology, architecture, and security model in the documentation →

Directly from the GitHub project

The current state. At a glance.

Version, pull requests, commits, and release information are updated automatically from the repository.

Loading project data …

Current versionv1.0.1View release → Open PRs1View pull requests → Latest commite22bc2b28.08.2026 Releases15Release history →
UPDATE LOG

Release information

All releases ↗

Loading release information …

Everything else in the documentation

Want to go deeper?

Installation, router setup, configuration, updates, security, and troubleshooting are covered in one clear documentation hub.

Open documentationView roadmap