Fairview
BetaA local-first control plane for AdGuard Home fleets.
Fairview watches every AdGuard Home server you run, captures configuration snapshots, shows drift against the configuration you want, and applies changes only through a previewed, approved, rollback-capable plan.
The problem
Running more than one AdGuard Home server means configuration drift, risky hand edits, and no record of who changed what. Fairview exists so that a small fleet of DNS servers can be observed and reconciled from one place without trusting a cloud service.
What it does
- Inventories AdGuard Home servers by site, with health checks on a schedule you control.
- Captures immutable configuration snapshots and surfaces drift against desired policy.
- Manages layered policies across global, site, and server group scopes with a guided editor.
- Applies changes through safe sync: preview the exact diff, review rollback evidence, approve, apply, verify, and roll back if needed.
- Records every operator mutation in an immutable audit trail.
Security notes
- Writes to DNS servers are disabled until explicitly enabled with a configuration flag, and nothing changes without an approved plan.
- Binds to loopback by default; no public registration or password recovery paths.
- Connector secrets are encrypted at rest with AES-256-GCM, with documented key rotation.
Honest limitations
- Designed for local operation. Exposing it beyond your network requires your own reverse proxy and TLS, following the documented posture guidance.
- The source is not yet published and the licence is not yet decided.
- Optional UniFi visibility and AI summaries stay off unless you turn them on.
Where to find it
Fairview is in development and not yet public. Licence not yet settled. Fairview is not open source today. The developer portal records its current state honestly.
Related work
- Timberline: A secure publishing platform that turns a private CMS into immutable public releases.