pgina VS AdGuardHome

Along with pGina - http://pgina.org/

In addition to the usual protection advice (disable upnp etc) I have the main admin account setup with 2FA using google authenticator. Staff work stations are connected via LDAP Windows Auth (pGina - http://pgina.org/) and have access to their own home folder and limited shared folders depending on their requirements (so no single account has access to everything. Remote Access is done via OpenVPN that passes though a wireguard firewall. I also have my own DNS setup for the entire office running (Adguard Home - https://github.com/AdguardTeam/AdGuardHome). I'm running local backups (once weekly) and snapshops running hourly for 48 hours, daily for 14 days, weekly for 8 weeks and monthly for 4 months. I also have a third backup weekly setup to a 3rd party service (backblaze - https://www.backblaze.com/business-pricing.html)

You can use pGina to auth windows users via LDAP without samba/active directory.

For the record, though, Windows can authenticate against FreeIPA. Back when NIS was still viable, we used NISGINA; the modern incarnation is pGINA. We contemplated authenticating our Linux machines with RADIUS while using LDAP for the directory, but put it on the back-burner and I'd forgotten about it.

Setup whatever Linux LDAP/Kerberos solution you want to try and see if you can get pGina to work for your Windows clients.

I've found an old post about it here and somebody mentions this open source authentication app that seems to let you do desktop auth with RADIUS but doesn't seem to be developed anymore.

We used to replace the GINA in NT so it would authenticate to NIS. The modern equivalent of NISgina is pGina

Also AdGuardhome will use optimistic caching, which is great.

https://github.com/AdguardTeam/AdGuardHome/discussions/4002#...

The main repo is GPLv3: https://github.com/AdguardTeam/AdGuardHome

They already have many other commercials products and I guess also the default filter rules are very good because of their experience in the domain.

But I think you can use it completely without the AdGuard servers and use other filter list sources.

How it compares to let's say AdGuard Home? Seems similar https://github.com/AdguardTeam/AdGuardHome

Adguardhome - Clients identification issue

You can check this documentation if you want to investigate further: https://github.com/AdguardTeam/AdGuardHome/wiki/Hosts-Blocklists

I'm using adguardhome v0.107.42 openwrt snapshot on linksys wrt1900ac v2, but when using DoH it won't resolve upstream DNS, but DoT is works perfectly OK, I've already set allow_unencrypted_doh to true in config .yaml file as per instruction here

AdGuard Home?

https://github.com/AdguardTeam/AdGuardHome

Regarding open source, AdGuard DNS actually is:

How does this compare to adguard home [ https://github.com/AdguardTeam/AdguardHome ] ??

Have you looked at AdGuard Home - Configuring clients?