tighten service boundaries and clean up config structure

2026-03-11 17:21:08 +00:00
parent eae286c5ab
commit 6569d7d4d8
16 changed files with 271 additions and 214 deletions
--- a/modules/_hosts/tahani/adguardhome.nix
+++ b/modules/_hosts/tahani/adguardhome.nix
@@ -1,7 +1,7 @@
-{
+{config, ...}: {
 	services.adguardhome = {
 		enable = true;
-		host = "0.0.0.0";
+		host = "127.0.0.1";
 		port = 10000;
 		settings = {
 			dhcp = {
@@ -57,4 +57,13 @@
 			];
 		};
 	};
+
+	services.caddy.virtualHosts."adguard.manticore-hippocampus.ts.net" = {
+		extraConfig = ''
+			tls {
+				get_certificate tailscale
+			}
+			reverse_proxy localhost:${toString config.services.adguardhome.port}
+		'';
+	};
 }