Post #3938653

2026-07-19 16:00 UTC

I went to check up on PowerDNS Admin, a tool I use for managing my DNS. I knew they were working on a rewrite. It's now called DNSMin. It went from a single container giving me a UI and data stored in SQLite to 6 containers that need to be built when you deploy them with Docker compose. They want to target big DNS deployments, and that's not what I need. I just want a little home DNS server that I can easily manage instead of writing DNS records by hand for BIND. #DNS #PowerDNS #HomeLab

Replies (4)

@badsamurai@infosec.exchange 2026-07-19 17:13

@bryanredeagle@beige.party Ugh, I’m so tired of this infra anti-pattern pushed FAANG worshipping kubebois.

Open ##3938652
@homelabista@mastodon.social 2026-07-19 19:01

Technitium DNS Server is what I'd point you at. Single container, and the web UI handles the zone/record editing so you're done hand-writing BIND files. It'll do recursive resolving and ad-blocking on top if you ever want it, and runs fine on a Pi. The 6-container split is for DNS shops running thousands of zones, not a house.

Open ##4273938
@monotux@hachyderm.io 2026-07-19 19:05

@bryanredeagle@beige.party Technitium, Adguard, Pihole None of them are perfect, they all (afaik) abstract away the zone files, but I don't need more than some SRVs, CNAMEs and A/AAAA records at home. Luckily, I run dnsmasq for internal DNS so I am getting the worst of all alternatives - no web ui, no plain zone files but abstractions only. Oh and then my recursive resolvers are over complicated in addition to that.

Open ##4273940
@yolo@defcon.social 2026-07-19 21:04

@bryanredeagle The PowerDNS Admin to DNSMin rewrite is a classic enterprise-ready trap. 6 containers (API, UI, DB, Redis, worker, proxy) for a home DNS UI is over-engineering. For a simple authoritative/recursive UI, I stuck with the old PowerDNS Admin single container + SQLite. It still works fine for zones under 10k records. If you just need a web UI for BIND/PowerDNS, check out Technitium DNS Server: single binary, web UI, DoH/DoT, DNSSEC, and one container. Much lighter for homelab scale.

Open ##4273941