machines/cj/configuration.nix

@@ -54,23 +54,14 @@
     # networking.hostId is required for ZFS
     hostId = "d9aef7b3";
 
-    # Aliases subdomains we serve here. Since we bypass pihole locally to avoid
-    # circular lookups, we can set local addresses here instead of using local
-    # dns in pihole (or global dns which would resolve to our WAN ips).
-    extraHosts = ''
-      127.0.0.1 git.jhink.org vault.jhink.org home.jhink.org
-      '';
-
 
     # The global useDHCP flag is deprecated, therefore explicitly set to false here. Per-interface useDHCP will be mandatory in the future, so this generated config replicates the default behaviour.
     useDHCP = false;
     interfaces.eth0.useDHCP = true;
-    #interfaces.wlan0.useDHCP = true;
-
-    nameservers = ["1.1.1.1" "9.9.9.9" "8.8.8.8" "1.0.0.1"];
+    interfaces.wlan0.useDHCP = true;
 
     enableIPv6 = true;
-    #tempAddresses = "disabled";  # do not create temporary ipv6 addresses
+    tempAddresses = "disabled";  # do not create temporary ipv6 addresses
 
     wireless = {
       enable = false; # turn of wifi until needed

machines/cj/firewall.nix

@@ -7,20 +7,13 @@
     #8123  # home-assistant
     #3000  # gitea
     8081  # vaultwarden
-    # If we are reverse proxying we should map to a different port than 443 or
-    # 80. Here we blackhole those ports so that pihole will be more efficient.
-    # When pihole "blocks" a site, depending on configuration what it may really
-    # does is returns its own IP, so the client then requests the content from
-    # this node at whichever port it needs. That is usually 80 or 443 for http
-    # and https, so it's better to block these fast than to pass all that
-    # traffic to some actual service.
-    #80 443  # reverse proxy
+    80 443  # reverse proxy
   ];
   allowedUDPPorts = [
     22000 21027  # syncthing
     3478 5514 10001 1900 123 # unifi
     53  # pihole
-    #80 443  # reverse proxy
+    80 443  # reverse proxy
   ];
   allowedUDPPortRanges = [
     { from = 5656; to = 5699; }  # unifi

machines/cj/hardware-configuration-zfs.nix

@@ -28,9 +28,8 @@
   };
 
   fileSystems."/boot" = {
-    device = "/dev/disk/by-partuuid/bfe1047f-b850-8745-80fb-f671ffe91387";
+    device = "/dev/disk/by-partuuid/e7ebac1e-eb4c-4a7d-8893-49a95f6014d4";
     fsType = "vfat";
-    neededForBoot = false;
   };
 
   fileSystems."/nix" =

machines/cj/home-assistant.nix

@@ -1,6 +1,6 @@
 serverIP :
 {
-  image = "ghcr.io/home-assistant/home-assistant:2023.06.0";
+  image = "ghcr.io/home-assistant/home-assistant:2022.11.2";
   #ports = [
     #"8123:8123"
   #];

machines/cj/pihole.nix

@@ -1,5 +1,5 @@
 { serverIP, serverIP6 } : {
-  image = "pihole/pihole:2023.05.2";
+  image = "pihole/pihole:2022.10";
   ports = [
     "53:53/tcp"
     "53:53/udp"