Your TV is phoning home. Your phone is tracking you. Your browser is being sold. HexBlock stops all of it — on every device, without touching any of them.
One command on a Raspberry Pi. Point your router at it. Every device on your network — phones, TVs, consoles, smart home — protected without touching a single one of them.
Every DNS query logged as it happens. Blocked or allowed, which device, which domain, which blocklist caught it. Live — not polled.
No paid tier. No premium plan. No features gated behind a subscription. Everything below is free on every install.
DNS blocking is different from a browser extension. It happens at the network level, before any device makes a connection. Your smart TV doesn't have an extension slot. Your games console doesn't either. HexBlock doesn't care — it blocks for all of them.
The setup script asks five questions and writes every config file. Pick how you want to run it.
No domain required. Static IP and local hostname set automatically. Access at hexblock.home from anything on your LAN.
Zero open inbound ports. Cloudflare handles SSL. Works behind carrier-grade NAT. Dashboard never exposed to the internet.
Fetches and renews Let's Encrypt certificates automatically. Zero certificate configuration. Runs alongside HexBlock in Docker Compose.
Setup script generates the Nginx config and prints the exact Certbot commands. For users already running Nginx on the same server.