Signed-off-by: Christoph Schmatzler <christoph@schmatzler.com>
This commit is contained in:
2025-10-25 15:12:17 +00:00
parent 682c06115f
commit b460a0a534
10 changed files with 49 additions and 62 deletions

View File

@@ -1,21 +0,0 @@
{
services.adguardhome = {
enable = true;
port = 10000;
settings = {
dns = {
upstream_dns = [
"1.1.1.1"
"1.0.0.1"
];
};
filtering = {
protection_enabled = true;
filtering_enabled = true;
safe_search = {
enabled = false;
};
};
};
};
}

View File

@@ -10,10 +10,6 @@
../core.nix
../syncthing.nix
../tailscale.nix
./adguard.nix
./docker.nix
./firewall.nix
./ssh.nix
sops-nix.nixosModules.sops
];

View File

@@ -1,5 +0,0 @@
{
virtualisation.docker = {
enable = true;
};
}

View File

@@ -1,9 +0,0 @@
{config, ...}: {
networking.firewall = {
enable = true;
trustedInterfaces = ["eno1" "tailscale0"];
allowedUDPPorts = [config.services.tailscale.port];
allowedTCPPorts = [22];
checkReversePath = "loose";
};
}

View File

@@ -1,9 +0,0 @@
{
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "yes";
PasswordAuthentication = false;
};
};
}