Adguard settings on OPNsense with Unbound

# When using Unbound set cache in /home/AdGuardHome.yaml on 0. In other cases use a cache_size: 4194304
127.0.0.1:5353
[/lan/]127.0.0.1:5353
[//]127.0.0.1:5353
[/168.192.in-addr.arpa/]127.0.0.1:5353

OPNsense - Settings / General:

Prefer IPv4 over IPv6: Checked
DNS Servers: all empty

OPNsense - Services

DHCPv4 / LAN / DNS Servers: All empty for all Interfaces

Unbound

Listen Port: 5353
DNSSEC: Checked
DHCP Registration: Checked
DHCP Static Mappings: Checked
DNS Cache: Checked, Flush cache
Overrides - non set

AdGuard Home

Enabled: Checked
Primary DNS: Checked
Upstream DNS server: 127.0.0.1:5353

Firewall (each interface, below for LAN)

TCP/IP: IPv4+6
Protocol: TCP/UDP
Source: LAN net
Destination: LAN address
Dest Port Range: DNS