rae/.dotfiles
rae/.dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~roxwize/.dotfiles synced 2025-05-03 20:23:08 +00:00
Code Issues Activity

~

Browse source
This commit is contained in:
Rae 5e 2025-03-10 23:34:04 -04:00
parent fea9f7203e
commit 69bea24303
Signed by: rae
GPG key ID: 5B1A0FAB9BAB81EE
11 changed files with 93 additions and 53 deletions
Download patch file Download diff file Expand all files Collapse all files

48
nixos/modules/docker/pihole/default.nix Normal file
View file

@ -0,0 +1,48 @@
{ pkgs, lib, config, ... }: let
cfg = config.r5e.containers.pihole;
in with lib; {
options.r5e.containers.pihole = {
enable = mkEnableOption "Pi-hole";
openFirewall = mkOption {
type = types.bool;
default = false;
};
listenPortHTTP = mkOption {
type = types.int;
default = 80;
};
listenPortHTTPS = mkOption {
type = types.int;
default = 443;
};
api-password = mkOption {
type = types.str;
default = "";
};
dhcp = {
enable = mkEnableOption "the Pi-hole DHCP server";
};
};
config = mkIf cfg.enable (mkMerge [
(import ./docker-compose.nix { inherit pkgs lib; })
{
virtualisation.oci-containers.containers.pihole = {
environment = {
TZ = config.time.timeZone;
FTLCONF_webserver_api_password = mkIf (cfg.api-password != "") cfg.api-password;
};
ports = [
(builtins.toString cfg.listenPortHTTP + ":80/tcp")
(builtins.toString cfg.listenPortHTTPS + ":443/tcp")
] ++ (optional cfg.dhcp.enable "67:67/udp");
};
networking.firewall = mkIf cfg.openFirewall {
allowedTCPPorts = [ 53 cfg.listenPortHTTP cfg.listenPortHTTPS ];
allowedUDPPorts = [ 53 ] ++ (optional cfg.dhcp.enable 67);
};
}
]);
}