From d39d4bbeec53eeefd44f11f492aae8fa576e16a6 Mon Sep 17 00:00:00 2001 From: Nathan Date: Wed, 6 Aug 2025 15:27:09 -0500 Subject: [PATCH] no pihole --- home-manager/nathan/packages/default.nix | 1 + .../configuration/homebox/default.nix | 2 +- .../services/containers/pihole/default.nix | 29 +++++++++++++++---- 3 files changed, 26 insertions(+), 6 deletions(-) diff --git a/home-manager/nathan/packages/default.nix b/home-manager/nathan/packages/default.nix index 87eb4b7..2fd9241 100644 --- a/home-manager/nathan/packages/default.nix +++ b/home-manager/nathan/packages/default.nix @@ -53,6 +53,7 @@ pyaudio pyusb debugpy + requests ]; in [ diff --git a/system-config/configuration/homebox/default.nix b/system-config/configuration/homebox/default.nix index 7d32d28..9c8825a 100644 --- a/system-config/configuration/homebox/default.nix +++ b/system-config/configuration/homebox/default.nix @@ -275,7 +275,7 @@ faster-whisper = true; }; rustdesk.enable = false; #broken - pihole.enable = true; #broken + pihole.enable = false; #broken code-server.enable = false; novnc.enable = true; }; diff --git a/system-config/services/containers/pihole/default.nix b/system-config/services/containers/pihole/default.nix index b8ea536..b3ca243 100644 --- a/system-config/services/containers/pihole/default.nix +++ b/system-config/services/containers/pihole/default.nix @@ -25,7 +25,7 @@ hostAddress = "192.168.100.10"; localAddress = "192.168.100.28"; - timeoutStartSec = "2min"; + timeoutStartSec = "infinity"; config = let pkgs-us = import inputs.nixpkgs-us { system = "x86_64-linux"; }; @@ -62,13 +62,13 @@ ]; settings = { - dns.upstreams = [ "127.0.0.1#5335" "1.1.1.1" "1.0.0.1" ]; - files.macvendor = lib.mkForce "/var/lib/macvendor.db"; + dns.upstreams = [ "1.1.1.1" "1.0.0.1" ]; + #files.macvendor = lib.mkForce "/var/lib/pihole/macvendor.db"; }; }; unbound = { - enable = true; + enable = false; settings = { server = { @@ -81,6 +81,25 @@ }; + users.users."root" = { + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICe6Ito5m9c4Tij8zI74L8hnd/QRchEO/cc5CH94mjMC nathan@homebox" + ]; + }; + + #networking.nameservers = [ "1.1.1.1" "1.0.0.1" ]; + networking.firewall.allowedTCPPorts = [ 22 ]; + + services.openssh = { + enable = true; + settings = { + PermitRootLogin = lib.mkForce "yes"; + PasswordAuthentication = false; + KbdInteractiveAuthentication = false; + }; + }; + + environment.systemPackages = with pkgs; let pypkgs = ps: with ps; [ @@ -91,7 +110,7 @@ (pkgs.python312.withPackages pypkgs) ]; - system.stateVersion = "24.05"; + system.stateVersion = "25.05"; }; }; };