Guides
Do something with TelltaleDNS
Each guide starts from what you want to do and walks you through it, with the web UI, the config file, Git, and the API side by side wherever more than one works.
New here? Get started installs TelltaleDNS and points your network at it. Every setting is in the configuration reference, and the detailed documentation goes deeper on everything here.
Set it up your way
Choose how you manage settings
The web UI, a config file, Git (Helm, Argo CD, Flux), or the API: what each is good for, how they stack, and which settings a cluster shares.
Read the guide →Build a cluster
Two or more nodes on one configuration: create it, join nodes, fail over by hand or automatically, and upgrade without dropping a query.
Read the guide →Run on Kubernetes
The Helm chart: one pod or many, real client addresses, one IP for DNS and the UI, secrets, monitoring, and a Pi in the same cluster.
Read the guide →Upgrades, backups, and moving in
Update channels and upgrading each kind of install, backups and restoring on a new machine, and bringing your setup from Pi-hole or Technitium.
Read the guide →Day to day
Block, allow, and explain
Blocklists, quick rules, schedules, blocked services and safe search, trying a list first, and finding out why a name was blocked.
Read the guide →Groups, devices, and VLANs
A group per network, upstreams per group, naming devices, names from your router or mDNS, what each device is, and local names.
Read the guide →Encrypted DNS and upstreams
Choose and encrypt your upstreams, offer DoT, DoH, and DoQ to your devices, send a domain elsewhere, resolve on your own, and DNSSEC.
Read the guide →Change things safely
Preview a change, try it against yesterday's traffic, roll it out in stages, pin back, and take a node down for maintenance.
Read the guide →Monitoring and alerts
Prometheus and Grafana, service-level objectives, alerts where you'll see them, query events and traces, and device anomalies.
Read the guide →Users and sign-in
The first admin, roles, two-factor sign-in, single sign-on with OIDC, API tokens and telltale ctl, and tokens for AI agents.