jacob/nix_config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Set up pihole. Updates

Browse Source
This commit is contained in:
Jacob Hinkle 2025-08-25 08:19:57 -04:00
parent d22a5f0db1
commit 99feef450c
2 changed files with 18 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
machines/cj/configuration.nix
View File

@ -7,6 +7,10 @@
./hardware-configuration-zfs.nix ./hardware-configuration-zfs.nix
]; ];
nixpkgs.config.permittedInsecurePackages = [
"electron-27.3.11"
];
# This lets us pin the nixpkgs registry by default to the nixpkgs used to build this system. # This lets us pin the nixpkgs registry by default to the nixpkgs used to build this system.
# Doing this means we are less likely to require the 30+MB download when # Doing this means we are less likely to require the 30+MB download when
# running commands like nix search or nix run # running commands like nix search or nix run
@ -75,11 +79,13 @@
wireless = { wireless = {
enable = false; # turn of wifi until needed enable = false; # turn of wifi until needed
userControlled.enable = true; userControlled.enable = true;
environmentFile = "/run/secrets/wifi/env"; #environmentFile = "/run/secrets/wifi/env";
secretsFile = "/run/secrets/wifi/env";
networks = { networks = {
"@SSID_HOME@" = { home.pskRaw = "ext:PSKRAW_HOME";
pskRaw = "@PSKRAW_HOME@"; #"@SSID_HOME@" = {
}; #pskRaw = "@PSKRAW_HOME@";
#};
}; };
}; };
firewall = import ./firewall.nix; firewall = import ./firewall.nix;
@ -95,9 +101,6 @@
#}; #};
hardware.bluetooth.enable = false; hardware.bluetooth.enable = false;
# Enable sound.
sound.enable = false;
# Define a user account. Don't forget to set a password with ‘passwd’. # Define a user account. Don't forget to set a password with ‘passwd’.
users.users.jacob = { users.users.jacob = {
isNormalUser = true; isNormalUser = true;
@ -194,7 +197,11 @@
syncthing = import ./syncthing.nix; syncthing = import ./syncthing.nix;
tailscale.enable = true; tailscale = {
enable = true;
extraUpFlags = "--accept-dns=false";
openFirewall = true;
};
timesyncd.enable = true; timesyncd.enable = true;

6
machines/cj/pihole.nix
View File

@ -1,9 +1,9 @@
{ serverIP, serverIP6 } : { { serverIP, serverIP6 } : {
image = "pihole/pihole:2025.04.0"; image = "pihole/pihole:2025.06.2";
ports = [ ports = [
"53:53/tcp" "53:53/tcp"
"53:53/udp" "53:53/udp"
#"8088:80" "8585:80"
#"4438:443" #"4438:443"
]; ];
environment = { environment = {
@ -24,7 +24,7 @@
]; ];
extraOptions = [ extraOptions = [
#"--cap-add=NET_ADMIN" #"--cap-add=NET_ADMIN"
"--network=host" #"--network=host"
"--no-hosts" # do not populate internal /etc/hosts with container host's "--no-hosts" # do not populate internal /etc/hosts with container host's
]; ];
} }