Block Adguard Home admin but allow DOH

 location /dns-query {

    proxy_pass https://10.0.0.103/dns-query;

    proxy_set_header Host $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

location / {

    return 404;

}