flake

flake.lock

@@ -272,11 +272,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1769450270,
+        "lastModified": 1769579508,
-        "narHash": "sha256-pdVm/zJazDUAasTyHFX/Pbrlk9Upjxi0yzgn7GjGe4g=",
+        "narHash": "sha256-EE2bs7xFrC64qrj0N2zP6E6e/nmhcdw6v/grdYi+BiY=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "a10c1e8f5ad2589414407f4851c221cb66270257",
+        "rev": "eec72f127831326b042d1f35003767a4ab6a9516",
         "type": "github"
       },
       "original": {
@@ -288,11 +288,11 @@
     "homebrew-cask": {
       "flake": false,
       "locked": {
-        "lastModified": 1769534692,
+        "lastModified": 1769599894,
-        "narHash": "sha256-B0Vhq1P8rba4cIru7an0FrMRoIrCV0PK+HnFxZ4ju/Q=",
+        "narHash": "sha256-NTL+RSm2LkKHEqlPPNt2kuofs/KPqkFjQmpCzyn5IH0=",
         "owner": "homebrew",
         "repo": "homebrew-cask",
-        "rev": "dee3ba39728c88775e89dc3bc8314e6d09d4e815",
+        "rev": "7b749190f94c53d8387a0fdbbaa67ce6db01b173",
         "type": "github"
       },
       "original": {
@@ -304,11 +304,11 @@
     "homebrew-core": {
       "flake": false,
       "locked": {
-        "lastModified": 1769535590,
+        "lastModified": 1769597547,
-        "narHash": "sha256-IlmKvq8JUpWZ9c7BVTgSHSRvYapeAisTEG3pCycWPfw=",
+        "narHash": "sha256-ZBNeifOX2Hzt7XB4We2rFR8VgtjyHiBXQnF0WHR5pkI=",
         "owner": "homebrew",
         "repo": "homebrew-core",
-        "rev": "e245e8176cff68ef0686a690fa545a480c7fa541",
+        "rev": "248434eebedbe705be0d32b70a7275eb75b778ab",
         "type": "github"
       },
       "original": {
@@ -359,11 +359,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1769525659,
+        "lastModified": 1769593731,
-        "narHash": "sha256-f0ezuyjAwqsAUtciG51zbjN7pmh3AU4WBK1/D+H44+M=",
+        "narHash": "sha256-HPc9kloIxVbf3HGi5Dv8T7IOqsGiHFWiJGa+cy8fdKI=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "a8fbb6f415d49b77869b51539b56d8afec8d4def",
+        "rev": "1fc3bb1210a60a06a4fab598881e1c4d17bda19e",
         "type": "github"
       },
       "original": {
@@ -482,11 +482,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1769535564,
+        "lastModified": 1769600004,
-        "narHash": "sha256-CCgkZI2G9vMJUmLYGY9TEPax3kduDA1ED/tdMJCd8F0=",
+        "narHash": "sha256-B66DgLnTRBD8GAFmo68Fz/SP4FpAGs0bMNgbFfPwbFg=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "1ee98906775c8456b4fffd34ec9ae65cd83df1e3",
+        "rev": "f055a34846380281aa7639482ea796fbc192ddfd",
         "type": "github"
       },
       "original": {
@@ -535,11 +535,11 @@
         "systems": "systems_4"
       },
       "locked": {
-        "lastModified": 1769418848,
+        "lastModified": 1769537308,
-        "narHash": "sha256-jLSg9IkglcIw64kU1utXxsxXhiVdD45dkh9ZJKaFQ7U=",
+        "narHash": "sha256-N7famD4s2hiDIicr9mJWhUj8l9EULB60+1QN/S+UjeM=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "c19a0517ddeed4c1548611e42e187048fc2e5dcf",
+        "rev": "7addac6d111837217c16762968a9042eac703f7e",
         "type": "github"
       },
       "original": {

hosts/tahani/adguardhome.nix

@@ -1,6 +1,7 @@
-{...}: {
+{
 	services.adguardhome = {
 		enable = true;
+		host = "0.0.0.0";
 		port = 10000;
 		settings = {
 			dns = {
@@ -15,7 +16,42 @@
 				safe_search = {
 					enabled = false;
 				};
+				safebrowsing_enabled = true;
+				blocked_response_ttl = 10;
+				filters_update_interval = 24;
+				blocked_services = {
+					ids = [
+						"reddit"
+						"twitter"
+					];
 				};
 			};
+			filters = [
+				{
+					enabled = true;
+					url = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.txt";
+					name = "HaGeZi Multi PRO";
+					id = 1;
+				}
+				{
+					enabled = true;
+					url = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/tif.txt";
+					name = "HaGeZi Threat Intelligence Feeds";
+					id = 2;
+				}
+				{
+					enabled = true;
+					url = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/gambling.txt";
+					name = "HaGeZi Gambling";
+					id = 3;
+				}
+				{
+					enabled = true;
+					url = "https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/nsfw.txt";
+					name = "HaGeZi NSFW";
+					id = 4;
+				}
+			];
+		};
 	};
 }

hosts/tahani/networking.nix

@@ -1,4 +1,6 @@
 {config, ...}: {
+	services.tailscale.extraSetFlags = ["--accept-routes=false"];
+
 	networking = {
 		useDHCP = false;
 		interfaces.eno1.ipv4.addresses = [
@@ -11,9 +13,15 @@
 		nameservers = ["1.1.1.1"];
 		firewall = {
 			enable = true;
-			trustedInterfaces = ["tailscale0"];
+			trustedInterfaces = ["eno1" "tailscale0"];
-			allowedUDPPorts = [config.services.tailscale.port];
+			allowedUDPPorts = [
-			allowedTCPPorts = [22];
+				53
+				config.services.tailscale.port
+			];
+			allowedTCPPorts = [
+				22
+				53
+			];
 			checkReversePath = "loose";
 		};
 	};

profiles/opencode.nix

@@ -4,16 +4,18 @@
 	...
 }: {
 	home.sessionVariables = {
-		OPENCODE_EXPERIMENTAL_PLAN_MODE = 1;
-		OPENCODE_EXPERIMENTAL_LSP_TOOL = 1;
 		OPENCODE_ENABLE_EXA = 1;
+		OPENCODE_EXPERIMENTAL_LSP_TOOL = 1;
+		OPENCODE_EXPERIMENTAL_MARKDOWN = 1;
+		OPENCODE_EXPERIMENTAL_PLAN_MODE = 1;
+		OPENCODE_EXPERIMENTAL_FILE_WATCHER = 1;
 	};
 
 	programs.opencode = {
 		enable = true;
 		package = inputs.llm-agents.packages.${pkgs.stdenv.hostPlatform.system}.opencode;
 		settings = {
-			model = "opencode/kimi-k2.5";
+			model = "opencode/claude-opus-4-5";
 			small_model = "opencode/minimax-m2.1";
 			theme = "catppuccin";
 			keybinds = {