How to Deploy Technitium – DNS Server Platform
Technitium DNS Server is an open-source, authoritative, and recursive DNS server designed for privacy and security. It offers advanced features such as DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH). It features a modern, user-friendly web console for managing zones, records, and logs.
This article demonstrates how to deploy Technitium DNS Server on Ubuntu 24.04 using Docker Compose. The stack includes Traefik for secure HTTPS access to the administration dashboard.
Prerequisites
Before you begin:
- Have access to an Ubuntu 24.04 server as a non-root user with sudo privileges.
- Install Docker and Docker Compose.
- Configure a domain name, such as
technitium.example.com, to point to your server’s public IP address for the web dashboard.
Freeing Port 53
By default, Ubuntu 24.04 runs a local stub resolver systemd-resolved that occupies port 53. To run your own DNS server, you must disable this service to allow Technitium to bind to the port.
Stop the
systemd-resolvedservice.CONSOLEDisable the service so it does not start again when you reboot.
CONSOLERemove the symbolic link for
/etc/resolv.conf.CONSOLETo ensure the server itself can still connect to the internet to download updates, you need to configure the server to use a public DNS provider. Create a new DNS configuration file.
CONSOLEThis configuration tells your server to send its own DNS queries to
1.1.1.1, a public DNS server provided by Cloudflare.
Set Up the Directory Structure and Environment Variables
Technitium requires persistent folders for configuration and data, along with environment variables that specify your domain and other settings. This section prepares both the directory structure and the .env file.
Create the project folders.
CONSOLEconfig- Persistent storage for Technitium logs, zones, and settings.letsencrypt- Traefik ACME certificates.
Navigate to the root Technitium directory.
CONSOLECreate a file named
.envin the project directory.CONSOLEAdd the following values:
INIReplace
technitium.example.comwith your domain, andadmin@example.comwith your email address. Save and close the file.
Deploy with Docker Compose
This section sets up the Technitium deployment. The stack includes Traefik for handling HTTPS connections to the administrative web panel and the Technitium service for handling actual DNS queries.
Add your user account to the docker user group.
CONSOLEApply new group membership.
CONSOLECreate the Docker Compose manifest file.
CONSOLEAdd the following contents:
YAMLSave and close the file.
This Docker Compose configuration deploys Technitium DNS Server behind Traefik, providing secure HTTPS access to the administrative panel while exposing DNS ports directly for network-wide DNS resolution. Each service plays a specific role in the deployment:
dns-server service (Technitium DNS Server)
- Runs the container using the official
technitium/dns-serverimage. - Exposes ports
53/udpand53/tcpso local devices can use this server for regular DNS queries. - Stores persistent configuration in the
./configdirectory, preserving DNS zones and settings across restarts. - Includes Traefik labels that route HTTPS traffic for your domain (
${DOMAIN}) to Technitium’s web management interface running internally on port 5380. - Uses environment variables to configure the server domain and timezone.
traefik service
- Acts as a reverse proxy and handles all incoming web traffic on ports 80 and 443.
- Automatically provisions and renews SSL certificates using Let’s Encrypt.
- Enforces HTTP→HTTPS redirection and forwards secure web requests to Technitium’s admin dashboard.
- Stores ACME certificate files inside the
./letsencryptdirectory.
- Runs the container using the official
Start all services in detached mode.
CONSOLECheck the container status.
CONSOLENote
For more information on managing a Docker Compose stack, see the How To Use Docker Compose article.
Initial Configuration
Technitium is now running, but you need to set the administrative password and configure the upstream resolvers (forwarders), so your server can resolve domains it doesn't host locally.
Open your web browser and navigate to your Technitium domain, such as
https://technitium.example.com.You will be greeted by the initial login screen. The default user is
admin, and the default password isadmin.Upon logging in, the system will immediately prompt you to change the password. Enter a strong password and save.
The dashboard will load, showing current statistics.
Navigate to the Settings tab in the main menu.
Select the Proxy & Forwarders sub-tab.
Go to the Forwarders section. In the text box, enter your preferred upstream DNS providers (one per line), such as
1.1.1.1and8.8.8.8. This ensures your server can resolve public domains, such asvultr.com, by querying these providers.Scroll to the bottom of the page and click Save Settings.
Note
If you wish to control who can query your server, the Recursion tab allows you to set the server to "Allow Recursion Only For Private Networks" (default) or define a specific "Network Access Control List (ACL)".
Testing
Verify that the server is working correctly and accessible from your client.
Run this command from your local computer. Replace
SERVER_IPwith your server's public IP address.CONSOLEYou should get a response containing the A records of the
vultr.comdomain.
Conclusion
You have successfully deployed Technitium DNS Server on Ubuntu 24.04. You now have a private, secure DNS resolver that can block ads and manage custom DNS records. For more information, refer to the Technitium Help page.
0 Comments
Be the first to comment and share your perspective with the community.