More options on AdGuard Home

### Prerequisites

- [x] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [x] I have searched other issues and found no duplicates

- [x] I want to request a feature or enhancement and not ask a question

### The problem

AdGuard Home is already a very useful tool, but its current statistics, logs, and administration features do not provide enough visibility or control for users who want to deeply understand and secure their DNS traffic. It can be difficult to identify where queries are going, which devices or services dominate the network, how secure the DNS traffic really is, and what administrative changes have been made over time. This lack of detailed insight limits troubleshooting, auditing, family protection, and security monitoring, even though AdGuard Home already has a strong foundation to become much more powerful in these areas.

### Proposed solution

## Summary

I would like to suggest several improvements to AdGuard Home related to statistics, logs, parental controls, device configuration, and additional DNS security protections.

## 1. More detailed statistics

It would be very useful to have more advanced statistics in the AdGuard Home dashboard, such as:

* The percentage of DNS queries that are encrypted.
* The percentage of DNS queries that use DNSSEC.
* A world map showing the destination countries or regions of DNS traffic.
* Statistics showing traffic dominance by major tech companies, for example the percentage of queries sent to Apple, Google, Meta/Facebook, Microsoft, Amazon, etc.

This could help users better understand where their DNS traffic is going and which major platforms dominate their network activity.

## 2. Improved logs

The current logs are useful, but I think they could be improved with a few quality-of-life features:

* An automatic log refresh toggle, instead of only having a manual refresh button.
* An option to download logs and statistics in several formats, such as:

* JSON
* HTML
* PDF
* CSV

This would make troubleshooting, auditing, and sharing reports much easier.

## 3. Age-based parental control profiles

Would it be possible to add parental control profiles based on age ranges?

For example, AdGuard Home could offer predefined filtering profiles for different age groups, such as young children, teenagers, or adults. These profiles could include default blocking categories and safe settings, while still allowing the administrator to customize them manually.

This would make AdGuard Home easier to use for families and less technical users.

## 4. Device configuration profiles

For home devices, especially iOS devices, it would be very useful to be able to download a configuration profile directly from AdGuard Home.

For example, an iOS configuration profile could automatically configure the DNS settings on the device. Ideally, this profile would also prevent users from easily changing the DNS configuration afterward.

This would make it easier to deploy AdGuard Home DNS settings across household devices.

## 5. Additional DNS protection options

I would also like to suggest additional security protections at the DNS level, such as:

* Protection against IDN homograph attacks, for example when a Latin character is replaced by a visually similar Cyrillic character.
* Protection against typosquatting domains.
* The ability to block newly registered domains, for example domains registered less than 30 days ago.
* The ability to block entire top-level domains, for example blocking all domains ending in `.blog`.

These features could help protect users against phishing, scams, malware, and other malicious domains.

## 6. Collaboration with Project Arachnid

Would it be possible for AdGuard Home to work with or integrate data from Project Arachnid?

https://projectarachnid.ca/

Since Project Arachnid is dedicated to child protection, this could be especially useful for improving family safety and parental control features.

## 7. Role-based access control and audit logs

It would also be very useful to support multiple user accounts for the AdGuard Home web interface, with different permission levels.

For example:

An administrator account with full access.
A read-only account that can only view logs.
A read-only account that can only view the configuration.
Other custom roles with limited permissions.

This would make it possible to segment access more securely, especially in households, small organizations, or shared environments.

It would also be important to have audit logs for all actions performed in the admin panel, such as configuration changes, filter list updates, login attempts, user management actions, and other administrative changes.

-------------

## 8. More detailed chart exploration

I would also like to be able to drill down into each chart and statistic shown in the dashboard.

For example, when clicking on a graph, it would be useful to see more detailed information behind the data, such as:

The related domains.
The related clients/devices.
The timestamps.
The associated filtering rules.
The upstream DNS servers used.
The blocked or allowed status.

This would make the statistics much more useful for troubleshooting, auditing, and understanding network activity in detail.

## Why this would be useful

These features would make AdGuard Home more powerful for home users, families, and security-conscious users. They would also improve visibility into DNS traffic, make logs easier to use, and provide stronger protection against modern DNS-based threats.

### Alternatives considered and additional information

_No response_