A collection of things to enhance the capabilities of your Unifi Dream Machine or Dream Machine Pro.
Pull Requests welcome! If you use this functionality to do new cool stuff to your UDM/P please send a PR and share it with the community!
Run an updated version of suricata and apply custom rules that survive reboot
Do this first. Enables init.d style scripts to run on every boot of your UDM. Includes examples to run wpa-supplicant/eap-proxy and/or ntop-ng on startup. Follow this readme.
It enables complete customization of your UDM/P and fills the gap that config.gateway.json left behind.
If you need python3 on your UDM, generally not recommended, can always use it in unifi-os container
Run a Wireguard client/server on your UDM/P. Utilizes wireguard-go, not linux kernel modules. The performance will take a hit due to that.
Install a DNS server that functions as a network-wide ad and tracker blocker, and which can also securely proxy encrypted DNS requests to an upstream DNS provider. Begin by following the instructions to setup on-boot-script and dns-common. Then, follow the guides below to setup either Pi-Hole, NextDNS, or AdGuard Home.
Base configuration for DNS server containers, both IPv4 and IPv6. Utilizes MacVLAN CNI plugins to completely isolate the network stack.
Run pihole on your UDM with podman.
Run NextDNS on your UDM with podman.
Run AdguardHome on your UDM with podman.
https://hub.docker.com/r/scyto/multicast-relay
This is a docker container that implements https://github.com/alsmith/multicast-relay to provide mDNS and SSDP on a unifi dream machine. It will likely work on any multi homed host.
https://github.com/tusc/ntopng-udm
Much better network stats for your UDM/P! Install this docker container and create an on_boot script to make sure it's always running.
https://github.com/kchristensen/udm-le
Provision and renew LetsEncrypt SSL certs from your UDM/P
https://github.com/shuguet/openconnect-udm OpenConnect VPN Client for the UniFi Dream Machine Pro (Unofficial)