Pi-hole
3.9k ↗Network-wide ad and tracker blocking at the DNS level
WireGuard VPN server with a simple web UI for managing clients
wg-easy wraps a WireGuard server and a clean web interface into one container: create clients, scan a QR code with the WireGuard mobile app, and you have a fast personal VPN home in minutes.
It intentionally covers the simple case — one server, road-warrior clients phoning home. Mesh networking, SSO and multi-node setups are the territory of Headscale or NetBird. Keep the admin UI off the public internet or behind auth.
The quickest respectable route from "I should have a VPN into my home network" to actually having one.
Network-wide ad and tracker blocking at the DNS level
DNS-level ad blocking with encrypted DNS and per-client controls
Reverse proxy with a web UI and one-click Let's Encrypt certificates
Open-source, self-hosted control server for the Tailscale protocol