Archive: https://archive.today/q9n25
From the post:
>In Part 1 I set up Headscale and had every tailnet client use Cloudflare DNS. That works, but it's leaving value on the table: every device that connects to my Tailscale gets whatever DNS servers I set, so I might as well run my own DNS server inside the private network and get ad-blocking, tracker-blocking, and internal name resolution everywhere I go.
This post swaps Cloudflare for Blocky, a lightweight DNS proxy with built-in blocklist support.
Archive: https://archive.today/q9n25
From the post:
>>In Part 1 I set up Headscale and had every tailnet client use Cloudflare DNS. That works, but it's leaving value on the table: every device that connects to my Tailscale gets whatever DNS servers I set, so I might as well run my own DNS server inside the private network and get ad-blocking, tracker-blocking, and internal name resolution everywhere I go.
This post swaps Cloudflare for Blocky, a lightweight DNS proxy with built-in blocklist support.