notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:979ea64f9a98687453ed04c9a177df112ab15e06
Branches Tags
notohh:master
..
compare: notohh:030065e3a572cfd618cb2f0b521fb4e733cbd87a
Branches Tags
notohh:master

No commits in common. "979ea64f9a98687453ed04c9a177df112ab15e06" and "030065e3a572cfd618cb2f0b521fb4e733cbd87a" have entirely different histories.
979ea64f9a ... 030065e3a5

2 changed files with 4 additions and 24 deletions
Show stats Expand all files Collapse all files

23
hosts/haru/services/adguardhome/adguardhome.nix
View file

@ -1,38 +1,19 @@
{config, ...}: {
_: {
imports = [
./filters.nix
./rewrites.nix
];
sops.secrets.nextdns = {owner = "adguardhome";};
users.users.adguardhome = {
isSystemUser = true;
group = "adguardhome";
};
users.groups.adguardhome = {};
networking.firewall.allowedTCPPorts = [53 3000];
networking.firewall.allowedUDPPorts = [53];
services.adguardhome = {
enable = true;
openFirewall = true;
mutableSettings = true;
settings = {
bind_port = 3000;
bind_host = "192.168.1.103";
os = {
user = "adguardhome";
group = "adguardhome";
};
dns = {
upstream_dns_file = config.sops.secrets.nextdns.path;
enable_dnssec = true;
cache_optimistic = true;
};
bind_host = "0.0.0.0";
statistics = {
enabled = true;
interval = "336h";
ignored = [
"youporn.com"
"pornhub.com"

5
secrets/secrets.yaml
View file

@ -11,7 +11,6 @@ searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9
smtp2go-pwd: ENC[AES256_GCM,data:03OCDnG73T8B2Q3TJLt1kg==,iv:QFI34ZoM88AuGvOwVmxsplkNKWFgwqBn1AFdHNREses=,tag:9YABs0nAh7Cx2vybuIW9sA==,type:str]
minio: ENC[AES256_GCM,data:ePCaN1wRnZheBsjEcAPizfGtZskS9rPxfP1kvvQvR+i3TGfwvAx2V96k59pt5GIqvxADi/lBuc4Er1EWQkMrhxMJlN4QmgU9LFOF,iv:81GUSVYe4LL/pI4Wy0CHSYwZvWNzWRBHR+KrCPEN430=,tag:9VFazb1U1XCpImZsNKpJyw==,type:str]
attic: ENC[AES256_GCM,data:/zVpQw2yYqWWLhZnFCB17YZqcZs2Fn0L37aW1vK2Gj9npsHcOqV3d3Q7SkXSd+DIh68ECEWVoEovWgflm12fwUwXcU2yWofdfgIkO1DS9+9YRtPFPDIKwSE8YQS2V0r0IjV7KFppCrUSLZ2ehMGL/qzvQNdzVla0UsUKgqS0NjY29gcxdO4N5eJlBS/7KM297ulqu3InFdBI0rnO6t2iv37xBv5SEajPOWnaLpTYsm/aIwupJmCjwHb3WFv1NkyC+QAgCgUzNiufVwuVRrLT0fF+p1qDGjYG7Q+dwd+2K8k+MqeJNLw=,iv:k1Dg7/o2zulAX0K7IpRuwkWu+dxWRQ9H1p88MBmOapo=,tag:aDIx4hmWGiFgaEhz2Gz9lw==,type:str]
nextdns: ENC[AES256_GCM,data:rGa8B+Yomds320Xj+PsfpEQlTS7tXO358kz84PW0Ehi2YYPB7w0jW2cZUdA/OUsLiyKFmkwVHUvxTDbxCYAdnIYriCpTM50IFwNay92SONoD0VXmwkLv,iv:DuL83//GYktUfVMUYkH5/2yeeIqzZz5RqokOfEbugvU=,tag:iSkNzbpk8UQCSj501LfQZg==,type:str]
sops:
kms: []
gcp_kms: []
@ -27,8 +26,8 @@ sops:
YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-01-07T23:52:57Z"
mac: ENC[AES256_GCM,data:rjH6vupm0T/edJ4PdnazBtik5N2gWvNDa6Khey82GeTIacnFqOAzb7ekcOogDi0NjgiGNiHNzf2HGNDQcyXb6zFJZaxPYOaZP5imni4ID1fDoIBJ5eo0XtRTy0kbMzJxLgb+Cr4oMpj4Xfvi3IulwilYU/+8pa/oQbn8EzNAl5o=,iv:8trmbHYoyMMGaWQZfSbTTQPFCdDPCLpcDM7h2RJsUMk=,tag:G1hBRYXQI6AnDxRNV5R+AQ==,type:str]
lastmodified: "2024-01-05T18:22:30Z"
mac: ENC[AES256_GCM,data:No+aOkTZC0+y4HYF87wwdZPmleEnhl1s2AsiRCBFq4/VLxi6rDKuaWqAwL2mSXnv5eut7qUK8MrELloT0/65ztJ1AkEn4GNChMQBM7XmTPU3hoLNecUFtK51iD0i5Q9rbB4vOpxMsgOaNIvNo5gVQ3jGh+n2mPoWrvAUX0/qSF8=,iv:xpa81aB8RBqsytrZUITDkBMlXahxUwRIwE/YcBj5Gf4=,tag:R8KkB+7wYgoD7PdjLv8ceA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1