no pihole

system-config/configuration/homebox/default.nix

@@ -111,12 +111,9 @@
 
   users.users."nathan" = {
     isNormalUser = true;
-    initialPassword = "7567";
+    hashedPasswordFile = config.sops.secrets."nathan/pass".path;
-    #hashedPasswordFile = config.sops.secrets."nathan/pass".path;
     extraGroups = [ 
         "wheel"
-        "docker"
-        "podman"
     ]; # Enable ‘sudo’ for the user.
     openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAsU69CxfQk58CvItPN426h5Alnpb60SH37wet97Vb57 nathan@laptop"
@@ -124,19 +121,12 @@
   };
 
     nix = {
-        nixPath = [ "nixpkgs=${inputs.nixpkgs}" "unstable=${inputs.nixpkgs-us}" ];
+        nixPath = [ "nixpkgs=${inputs.nixpkgs}" ];
         settings = {
             experimental-features = [ "nix-command" "flakes" ];
         };
     };
 
-    virtualisation.docker.enable = true;
-
-    environment.systemPackages = with pkgs; [
-        docker
-        docker-compose
-    ];
-
     sops = {
         age.keyFile = "/home/nathan/.config/sops/age/keys.txt";
         defaultSopsFile = ./secrets.yaml;
@@ -146,11 +136,6 @@
             "nathan/pass" = {
                 neededForUsers = true;
             };
-
-            "authentik/pass" = {};
-            "authentik/secret_key" = {};
-
-            "nextcloud/pass" = {};
         };
     };
 
@@ -217,12 +202,12 @@
                   faster-whisper = true;
               };
               rustdesk.enable = false; #broken
-                  pihole.enable = true; #broken
+              pihole.enable = false; #broken
-                  code-server.enable = false;
+              code-server.enable = false;
               novnc.enable = true;
               minecraft.enable = true;
 
-                  sandbox.enable = false;
+              sandbox.enable = false;
           };
       };
   };

system-config/services/containers/nextcloud/default.nix

@@ -7,6 +7,8 @@
 
     config = lib.mkIf config.sysconfig.opts.virtualization.nextcloud.enable {
 
+        sops.secrets."nextcloud/pass" = {};
+
         containers.nextcloud = {
 
             autoStart = true;