probably broken

2025-12-31 12:24:43 -06:00
parent 0c1f0a4639
commit d8058560b1
158 changed files with 1198 additions and 423 deletions
--- a/system/services/containers/pihole/default.nix
+++ b/system/services/containers/pihole/default.nix
@@ -0,0 +1,118 @@
+{ config, lib, pkgs, inputs, ... }: {
+
+    options.sysconfig.virtualization.pihole.enable = lib.options.mkOption {
+        type = lib.types.bool;
+        default = false;
+    };
+
+
+    config = lib.mkIf config.sysconfig.virtualization.pihole.enable {
+/*        sops.secrets."pihole/pass" = {};
+
+        sops.templates."pihole.env" = {
+            content = ''
+                WEBPASSWORD=${config.sops.placeholder."pihole/pass"}
+            '';
+
+            path = "/ssd1/Pihole/.env";
+        };
+*/
+
+        networking = {
+
+            nat.internalInterfaces = [ "ve-pihole" ];
+            nameservers = [ "192.168.100.28" ];
+        };
+
+        containers.pihole = {
+
+            autoStart = true;
+            privateNetwork = true;
+            hostAddress = "192.168.100.10";
+            localAddress = "192.168.100.28";
+
+            timeoutStartSec = "infinity";
+
+            config = let
+                pkgs-us = import inputs.nixpkgs-us { system = "x86_64-linux"; };
+            in {
+
+                /*imports = [
+                    (import "${inputs.nixpkgs-us}/nixos/modules/services/networking/pihole-ftl.nix" { config = config.containers.pihole.config; inherit lib; pkgs = pkgs-us;})
+                        (import "${inputs.nixpkgs-us}/nixos/modules/services/web-apps/pihole-web.nix" { config = config.containers.pihole.config; inherit lib; pkgs = pkgs-us;})
+                ];*/
+
+                services = {
+                    pihole-web = {
+                        enable = true;
+
+                        package = pkgs-us.pihole-web;
+
+#hostName = "192.168.100.28";
+
+                        ports = [ 80 ];
+                    };
+
+                    pihole-ftl = {
+                        enable = true;
+
+                        package = pkgs-us.pihole-ftl;
+
+                        openFirewallDNS = true;
+                        openFirewallWebserver = true;
+
+                        lists = [
+                        {
+                            url = "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts";
+                        }
+                        ];
+
+                        settings = {
+                            dns.upstreams = [ "127.0.0.1#5335" ];
+                            files.macvendor = lib.mkForce "/var/lib/pihole/macvendor.db";
+                        };
+                    };
+
+                    unbound = {
+                        enable = true;
+
+                        resolveLocalQueries = true;
+
+                        settings = {
+                            server = {
+                                interface = [ "127.0.0.1" ];
+                                port = 5335;
+                            };
+
+                        };
+                    };
+
+                };
+
+                users.users."root" = {
+                    openssh.authorizedKeys.keys = [
+                    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICe6Ito5m9c4Tij8zI74L8hnd/QRchEO/cc5CH94mjMC nathan@homebox"
+                    ];
+                };
+
+                networking = {
+                    firewall.allowedTCPPorts = [ 22 ];
+                    #nameservers = [ "1.1.1.1" "1.0.0.1" ];
+                };
+
+                services.openssh = {
+                    enable = true;
+                    settings = {
+                        PermitRootLogin = lib.mkForce "yes";
+                        PasswordAuthentication = false;
+                        KbdInteractiveAuthentication = false;
+                    };
+                };
+                
+                system.stateVersion = "25.05";
+            };
+        };
+    };
+
+    
+}