diff --git a/machines/bomba/networking.nix b/machines/bomba/networking.nix
index 62c12aa..dbcf593 100644
--- a/machines/bomba/networking.nix
+++ b/machines/bomba/networking.nix
@@ -8,6 +8,7 @@
       allowedTCPPorts = [
         22
         25
+        53
         80
         143
         443
@@ -17,6 +18,7 @@
         27015
       ];
       allowedUDPPorts = [
+        53
         80
         443
         34197
diff --git a/machines/bomba/services/adguard.nix b/machines/bomba/services/adguard.nix
new file mode 100644
index 0000000..12ae9b7
--- /dev/null
+++ b/machines/bomba/services/adguard.nix
@@ -0,0 +1,18 @@
+{ ... }:
+{
+  services.adguardhome = {
+    enable = true;
+    port = 8017;
+    mutableSettings = true;
+    settings = {
+      dns = {
+        upstream_dns = [
+          "1.1.1.1"
+          "9.9.9.9"
+        ];
+        bind_hosts = [ "192.168.1.223" ];
+        port = 53;
+      };
+    };
+  };
+}
diff --git a/machines/bomba/services/caddy.nix b/machines/bomba/services/caddy.nix
index 54e7028..ec01633 100644
--- a/machines/bomba/services/caddy.nix
+++ b/machines/bomba/services/caddy.nix
@@ -83,6 +83,10 @@
         "inventory.patrickcanal.it".extraConfig = ''
           reverse_proxy :${toString config.services.homebox.settings.HBOX_WEB_PORT}
         '';
+        "adguard.patrickcanal.it".extraConfig = ''
+          ${basicAuth}
+          reverse_proxy :${toString config.services.adguardhome.port}
+        '';
       };
     };
 
diff --git a/machines/bomba/services/default.nix b/machines/bomba/services/default.nix
index fe051e6..6165614 100644
--- a/machines/bomba/services/default.nix
+++ b/machines/bomba/services/default.nix
@@ -2,6 +2,7 @@
 {
   imports = [
     ./actual.nix
+    ./adguard.nix
     ./caddy.nix
     ./fail2ban.nix
     ./gitea.nix