AGH Central

Centralized management console for multiple AdGuard Home instances.

Features

• Centralized log dashboard — query logs from all instances in one place, filterable by domain, client, server, status
• Real-time stats — hourly/daily aggregates, block rate, top domains, top clients (TimescaleDB continuous aggregates)
• DNS cache flush — flush one or all instances from the dashboard with one click
• Multi-instance sync — via bakito/adguardhome-sync
• mTLS — mutual TLS between agents and manager (opt-in, TLS 1.3)
• Multilingual — English (default) + French, auto-detected from browser
• Auth — local login + SSO/OpenID Connect stub (activate in Settings)

Architecture

┌─────────────────────────────────────────────┐
│  Manager  (docker compose — central server) │
│  ┌──────────┐ ┌───────┐ ┌────────────────┐  │
│  │ Dashboard│ │  API  │ │  AGH-Sync      │  │
│  │ React    │ │  Go   │ │  bakito/sync   │  │
│  └──────────┘ └───────┘ └────────────────┘  │
│  ┌──────────────────┐  ┌──────────────────┐  │
│  │  TimescaleDB     │  │  Redis           │  │
│  └──────────────────┘  └──────────────────┘  │
└─────────────────────────────────────────────┘
          ▲ mTLS :4317 (collector)
          │
┌─────────┴──────────┐   ┌────────────────────┐
│  Agent (host A)    │   │  Agent (host B)     │
│  Log Forwarder     │   │  Log Forwarder      │
│  Cache Flush proxy │   │  Cache Flush proxy  │
│  ┌──────────────┐  │   │  ┌──────────────┐  │
│  │ AdGuard Home │  │   │  │ AdGuard Home │  │
│  └──────────────┘  │   │  └──────────────┘  │
└────────────────────┘   └────────────────────┘

Quick start

cd manager && cp .env.example .env
# Edit .env then:
docker compose up -d

See docs/INSTALL.md for full setup including mTLS production config.

Versions

Version	What's included
v0.1.0	Manager API (Go), Agent (Go), TimescaleDB migrations, AGH-Sync stack, i18n
v0.2.0	+ React dashboard (login, dashboard, logs, servers, settings)
v0.3.0	+ mTLS agent↔manager, multi-stage Dockerfile (Node+Go in one build pass), PKI scripts

Roadmap

• v0.4.0 — SSO OpenID Connect (stub already in settings)
• v0.5.0 — AGH API polling fallback (log catch-up after agent disconnection) | v0.4.0 | + Sync groups (un conteneur par groupe, formulaire + éditeur YAML, contrôle Docker), SSO OpenID Connect (PKCE, Authentik natif) |