rename a few things, add minizen host, rebase with other changes
This commit is contained in:
@@ -0,0 +1,64 @@
|
||||
{ config, lib, pkgs, ... }:
|
||||
|
||||
{
|
||||
services.blocky = {
|
||||
enable = true;
|
||||
settings = {
|
||||
certFile = "/etc/nixos/dns.crt";
|
||||
keyFile = "/etc/nixos/dns.key";
|
||||
caching = {
|
||||
minTime = "5m";
|
||||
maxTime = "30m";
|
||||
prefetching = true;
|
||||
};
|
||||
ports = {
|
||||
dns = 5353;
|
||||
tls = 853;
|
||||
http = 4000;
|
||||
};
|
||||
|
||||
upstreams.groups.default = [
|
||||
"https://dns.quad9.net/dns-query"
|
||||
];
|
||||
# For initially solving DoH/DoT Requests when no system Resolver is available.
|
||||
bootstrapDns = {
|
||||
upstream = "https://dns.quad9.net/dns-query";
|
||||
ips = [ "9.9.9.9" "1.1.1.1" ];
|
||||
};
|
||||
|
||||
#Enable Blocking of certain domains.
|
||||
blocking = {
|
||||
loading.refreshPeriod = "1h";
|
||||
denylists = {
|
||||
ads = [
|
||||
"https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
|
||||
"https://v.firebog.net/hosts/AdguardDNS.txt"
|
||||
"https://v.firebog.net/hosts/Admiral.txt"
|
||||
"https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt"
|
||||
"https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts"
|
||||
];
|
||||
tracking = [
|
||||
"https://v.firebog.net/hosts/Easyprivacy.txt"
|
||||
"https://v.firebog.net/hosts/Prigent-Ads.txt"
|
||||
"https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt"
|
||||
"https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt"
|
||||
"https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts"
|
||||
];
|
||||
sus = [
|
||||
"https://someonewhocares.org/hosts/zero/hosts"
|
||||
"https://raw.githubusercontent.com/RooneyMcNibNug/pihole-stuff/master/SNAFU.txt"
|
||||
"https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt"
|
||||
"https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts"
|
||||
"https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt"
|
||||
"https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt"
|
||||
];
|
||||
};
|
||||
|
||||
#Configure what block categories are used
|
||||
clientGroupsBlock = {
|
||||
default = [ "ads" "tracking" "sus" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{ config, lib, pkgs, ... }:
|
||||
|
||||
|
||||
{
|
||||
services.gonic = {
|
||||
enable = true;
|
||||
settings = {
|
||||
music-path = [
|
||||
"/home/k3t/Music"
|
||||
];
|
||||
playlists-path = "/home/k3t/Playlists";
|
||||
podcast-path = "/home/k3t/Podcasts";
|
||||
};
|
||||
};
|
||||
|
||||
services.nginx.virtualHosts."fckurspotify.lostin06.duckdns.org" = {
|
||||
enableACME = true;
|
||||
forceSSL = true;
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:4747";
|
||||
proxyWebsockets = true;
|
||||
recommendedProxySettings = true;
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -0,0 +1,20 @@
|
||||
{ config, pkgs, lib, ... }:
|
||||
|
||||
{
|
||||
virtualisation.oci-containers.containers."minecraft-server" = {
|
||||
image = "ghcr.io/graalvm/graalvm-community:25";
|
||||
volumes = [
|
||||
"/var/lib/minecraft:/data:rw"
|
||||
];
|
||||
ports = [
|
||||
"25565:25565/tcp"
|
||||
"24454:24454/udp"
|
||||
];
|
||||
extraOptions = [
|
||||
"--tty"
|
||||
"--interactive"
|
||||
];
|
||||
entrypoint = "/data/run.sh";
|
||||
log-driver = "journald";
|
||||
};
|
||||
}
|
||||
@@ -0,0 +1,17 @@
|
||||
{ config, lib, pkgs, ... }:
|
||||
|
||||
|
||||
{
|
||||
services.nginx = {
|
||||
enable = true;
|
||||
recommendedGzipSettings = true;
|
||||
recommendedOptimisation = true;
|
||||
recommendedProxySettings = true;
|
||||
recommendedTlsSettings = true;
|
||||
};
|
||||
|
||||
security.acme = {
|
||||
acceptTerms = true;
|
||||
defaults.email = "k3t@k3t.dev";
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user