Did you change the native VLAN to IoT or just added the tag and left the native VLAN on the switch port set to default? You should be able to change the native VLAN and leave tagged VLANs as “allow all”.

My only other thought is how did you isolate the IoT network and are you able to access other devices from default to IoT?

I’ve had it running for a few months, I don’t use it that often but it’s been super handy when I need it.

Mobile Device Manager, used for protecting/locking down devices.

I did this as well, I still have 2 pihole instances running with gravitysync for now, but AGH sync is much easier to setup and maintain. My 2 pihole instances are running for my guest network only and AGH is running everything else.

I ran HA on mine for a while before I moved it to a VM. Right now I’m using my Pi as a secondary wireguard VPN in case my primary is down for some reason.

Also, quick tip, I found that ikea zigbee bulbs work really well but have really bad coil whine when off, don’t use them for bedside lighting.

This was my first thought as well. This isn’t a replacement for portainer agents on mulitple docker hosts, hopefully that’s something that is doable in the future.