notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:030065e3a572cfd618cb2f0b521fb4e733cbd87a
Branches Tags
notohh:master
...
compare: notohh:979ea64f9a98687453ed04c9a177df112ab15e06
Branches Tags
notohh:master

2 commits
030065e3a5 ... 979ea64f9a

Author SHA1 Message Date
notohh
979ea64f9a
adguardhome: add upstream dns with sops
All checks were successful
flake check / check (push) Successful in 4m41s
fmt check / check (push) Successful in 59s
 2024-01-07 19:25:52 -05:00
notohh
5ddc6c743f
sops: add nextdns secret 2024-01-07 19:18:09 -05:00
2 changed files with 24 additions and 4 deletions
Show stats Expand all files Collapse all files

23
hosts/haru/services/adguardhome/adguardhome.nix
View file

@ -1,19 +1,38 @@
_: { {config, ...}: {
imports = [ imports = [
./filters.nix ./filters.nix
./rewrites.nix ./rewrites.nix
]; ];
sops.secrets.nextdns = {owner = "adguardhome";};
users.users.adguardhome = {
isSystemUser = true;
group = "adguardhome";
};
users.groups.adguardhome = {};
networking.firewall.allowedTCPPorts = [53 3000]; networking.firewall.allowedTCPPorts = [53 3000];
networking.firewall.allowedUDPPorts = [53]; networking.firewall.allowedUDPPorts = [53];
services.adguardhome = { services.adguardhome = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
mutableSettings = true; mutableSettings = true;
settings = { settings = {
bind_port = 3000; bind_port = 3000;
bind_host = "0.0.0.0"; bind_host = "192.168.1.103";
os = {
user = "adguardhome";
group = "adguardhome";
};
dns = {
upstream_dns_file = config.sops.secrets.nextdns.path;
enable_dnssec = true;
cache_optimistic = true;
};
statistics = { statistics = {
enabled = true; enabled = true;
interval = "336h";
ignored = [ ignored = [
"youporn.com" "youporn.com"
"pornhub.com" "pornhub.com"

5
secrets/secrets.yaml
View file

@ -11,6 +11,7 @@ searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9
smtp2go-pwd: ENC[AES256_GCM,data:03OCDnG73T8B2Q3TJLt1kg==,iv:QFI34ZoM88AuGvOwVmxsplkNKWFgwqBn1AFdHNREses=,tag:9YABs0nAh7Cx2vybuIW9sA==,type:str] smtp2go-pwd: ENC[AES256_GCM,data:03OCDnG73T8B2Q3TJLt1kg==,iv:QFI34ZoM88AuGvOwVmxsplkNKWFgwqBn1AFdHNREses=,tag:9YABs0nAh7Cx2vybuIW9sA==,type:str]
minio: ENC[AES256_GCM,data:ePCaN1wRnZheBsjEcAPizfGtZskS9rPxfP1kvvQvR+i3TGfwvAx2V96k59pt5GIqvxADi/lBuc4Er1EWQkMrhxMJlN4QmgU9LFOF,iv:81GUSVYe4LL/pI4Wy0CHSYwZvWNzWRBHR+KrCPEN430=,tag:9VFazb1U1XCpImZsNKpJyw==,type:str] minio: ENC[AES256_GCM,data:ePCaN1wRnZheBsjEcAPizfGtZskS9rPxfP1kvvQvR+i3TGfwvAx2V96k59pt5GIqvxADi/lBuc4Er1EWQkMrhxMJlN4QmgU9LFOF,iv:81GUSVYe4LL/pI4Wy0CHSYwZvWNzWRBHR+KrCPEN430=,tag:9VFazb1U1XCpImZsNKpJyw==,type:str]
attic: ENC[AES256_GCM,data:/zVpQw2yYqWWLhZnFCB17YZqcZs2Fn0L37aW1vK2Gj9npsHcOqV3d3Q7SkXSd+DIh68ECEWVoEovWgflm12fwUwXcU2yWofdfgIkO1DS9+9YRtPFPDIKwSE8YQS2V0r0IjV7KFppCrUSLZ2ehMGL/qzvQNdzVla0UsUKgqS0NjY29gcxdO4N5eJlBS/7KM297ulqu3InFdBI0rnO6t2iv37xBv5SEajPOWnaLpTYsm/aIwupJmCjwHb3WFv1NkyC+QAgCgUzNiufVwuVRrLT0fF+p1qDGjYG7Q+dwd+2K8k+MqeJNLw=,iv:k1Dg7/o2zulAX0K7IpRuwkWu+dxWRQ9H1p88MBmOapo=,tag:aDIx4hmWGiFgaEhz2Gz9lw==,type:str] attic: ENC[AES256_GCM,data:/zVpQw2yYqWWLhZnFCB17YZqcZs2Fn0L37aW1vK2Gj9npsHcOqV3d3Q7SkXSd+DIh68ECEWVoEovWgflm12fwUwXcU2yWofdfgIkO1DS9+9YRtPFPDIKwSE8YQS2V0r0IjV7KFppCrUSLZ2ehMGL/qzvQNdzVla0UsUKgqS0NjY29gcxdO4N5eJlBS/7KM297ulqu3InFdBI0rnO6t2iv37xBv5SEajPOWnaLpTYsm/aIwupJmCjwHb3WFv1NkyC+QAgCgUzNiufVwuVRrLT0fF+p1qDGjYG7Q+dwd+2K8k+MqeJNLw=,iv:k1Dg7/o2zulAX0K7IpRuwkWu+dxWRQ9H1p88MBmOapo=,tag:aDIx4hmWGiFgaEhz2Gz9lw==,type:str]
nextdns: ENC[AES256_GCM,data:rGa8B+Yomds320Xj+PsfpEQlTS7tXO358kz84PW0Ehi2YYPB7w0jW2cZUdA/OUsLiyKFmkwVHUvxTDbxCYAdnIYriCpTM50IFwNay92SONoD0VXmwkLv,iv:DuL83//GYktUfVMUYkH5/2yeeIqzZz5RqokOfEbugvU=,tag:iSkNzbpk8UQCSj501LfQZg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -26,8 +27,8 @@ sops:
YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ== 5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-01-05T18:22:30Z" lastmodified: "2024-01-07T23:52:57Z"
mac: ENC[AES256_GCM,data:No+aOkTZC0+y4HYF87wwdZPmleEnhl1s2AsiRCBFq4/VLxi6rDKuaWqAwL2mSXnv5eut7qUK8MrELloT0/65ztJ1AkEn4GNChMQBM7XmTPU3hoLNecUFtK51iD0i5Q9rbB4vOpxMsgOaNIvNo5gVQ3jGh+n2mPoWrvAUX0/qSF8=,iv:xpa81aB8RBqsytrZUITDkBMlXahxUwRIwE/YcBj5Gf4=,tag:R8KkB+7wYgoD7PdjLv8ceA==,type:str] mac: ENC[AES256_GCM,data:rjH6vupm0T/edJ4PdnazBtik5N2gWvNDa6Khey82GeTIacnFqOAzb7ekcOogDi0NjgiGNiHNzf2HGNDQcyXb6zFJZaxPYOaZP5imni4ID1fDoIBJ5eo0XtRTy0kbMzJxLgb+Cr4oMpj4Xfvi3IulwilYU/+8pa/oQbn8EzNAl5o=,iv:8trmbHYoyMMGaWQZfSbTTQPFCdDPCLpcDM7h2RJsUMk=,tag:G1hBRYXQI6AnDxRNV5R+AQ==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1