Pi-hole
3.9k ↗Network-wide ad and tracker blocking at the DNS level
Open-source, self-hosted control server for the Tailscale protocol
Headscale reimplements the Tailscale coordination server so the official Tailscale clients can build their WireGuard mesh through a server you run, instead of a commercial control plane. Your devices, your keys, your coordination.
It is a community project, not a Tailscale product (though Tailscale has been friendly toward it), and it targets the core features: mesh networking, MagicDNS-style naming and ACLs. Some newer commercial features arrive late or not at all, and you become responsible for availability of the control plane.
For people who love the Tailscale experience but consider "someone else's coordination server" a contradiction.
Network-wide ad and tracker blocking at the DNS level
DNS-level ad blocking with encrypted DNS and per-client controls
Reverse proxy with a web UI and one-click Let's Encrypt certificates
Web server and reverse proxy with automatic HTTPS by default