Delete Pihole
This commit is contained in:
parent
ebfc1f33a4
commit
1ac21a813a
7 changed files with 2 additions and 132 deletions
|
@ -35,7 +35,6 @@ Legend:
|
|||
| ✅ | `inbucket/inbucket` | |
|
||||
| ✅ | `lscr.io/linuxserver/syncthing` | |
|
||||
| ✅ | `codeberg.org/forgejo/forgejo` | |
|
||||
| ✅ | `pihole/pihole` | |
|
||||
| ✅ | `ghcr.io/immich-app/immich-server` | |
|
||||
| ✅ | `ghcr.io/immich-app/immich-machine-learning` | |
|
||||
| ✅ | `docker.io/redis:6.2-alpine` | Database for Immich |
|
||||
|
|
|
@ -69,11 +69,6 @@
|
|||
namespace = "syncthing";
|
||||
};
|
||||
|
||||
pihole = {
|
||||
module.pihole.enable = true;
|
||||
namespace = "dns";
|
||||
};
|
||||
|
||||
immich = {
|
||||
module.immich.enable = true;
|
||||
namespace = "immich";
|
||||
|
|
|
@ -11,7 +11,6 @@ _: {
|
|||
inbucket = "inbucket/inbucket:edge";
|
||||
syncthing = "lscr.io/linuxserver/syncthing:1.29.6";
|
||||
forgejo = "codeberg.org/forgejo/forgejo:11.0.1";
|
||||
pihole = "pihole/pihole:2025.02.1";
|
||||
immich = "ghcr.io/immich-app/immich-server:v1.132.1";
|
||||
immich-machine-learning = "ghcr.io/immich-app/immich-machine-learning:v1.132.1";
|
||||
immich-redis = "docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1";
|
||||
|
@ -42,7 +41,6 @@ _: {
|
|||
traefikIPv4 = "192.168.30.128";
|
||||
kmsIPv4 = "192.168.30.129";
|
||||
inbucketIPv4 = "192.168.30.130";
|
||||
piholeIPv4 = "192.168.30.131";
|
||||
gitIPv4 = "192.168.30.132";
|
||||
delugeIPv4 = "192.168.30.133";
|
||||
bind9IPv4 = "192.168.30.134";
|
||||
|
|
|
@ -88,8 +88,6 @@
|
|||
lab = {
|
||||
longhorn.persistentVolume = {
|
||||
kitchenowl.storage = "100Mi";
|
||||
pihole-data.storage = "750Mi";
|
||||
pihole-dnsmasq.storage = "16Mi";
|
||||
immich.storage = "50Gi";
|
||||
immich-db.storage = "5Gi";
|
||||
attic.storage = "15Gi";
|
||||
|
|
|
@ -20,7 +20,6 @@
|
|||
./forgejo
|
||||
./paperless.nix
|
||||
./syncthing.nix
|
||||
./pihole.nix
|
||||
./immich.nix
|
||||
./attic.nix
|
||||
./bind9
|
||||
|
|
|
@ -1,117 +0,0 @@
|
|||
{
|
||||
globals,
|
||||
config,
|
||||
lib,
|
||||
...
|
||||
}: {
|
||||
options.pihole.enable = lib.mkEnableOption "pihole";
|
||||
|
||||
config = lib.mkIf config.pihole.enable {
|
||||
kubernetes.resources = {
|
||||
secrets.pihole.stringData.webPassword = "ref+sops://secrets.yml#/pihole/password";
|
||||
|
||||
deployments.pihole.spec = {
|
||||
selector.matchLabels.app = "pihole";
|
||||
|
||||
strategy = {
|
||||
type = "RollingUpdate";
|
||||
|
||||
rollingUpdate = {
|
||||
maxSurge = 0;
|
||||
maxUnavailable = 1;
|
||||
};
|
||||
};
|
||||
|
||||
template = {
|
||||
metadata.labels.app = "pihole";
|
||||
|
||||
spec = {
|
||||
containers.pihole = {
|
||||
image = globals.images.pihole;
|
||||
|
||||
env = {
|
||||
TZ.value = "Europe/Amsterdam";
|
||||
PIHOLE_DNS_.value = "192.168.30.1";
|
||||
|
||||
WEBPASSWORD.valueFrom.secretKeyRef = {
|
||||
name = "pihole";
|
||||
key = "webPassword";
|
||||
};
|
||||
};
|
||||
|
||||
ports = {
|
||||
web.containerPort = 80;
|
||||
|
||||
dns = {
|
||||
containerPort = 53;
|
||||
protocol = "UDP";
|
||||
};
|
||||
};
|
||||
|
||||
volumeMounts = [
|
||||
{
|
||||
name = "data";
|
||||
mountPath = "/etc/pihole";
|
||||
}
|
||||
{
|
||||
name = "dnsmasq";
|
||||
mountPath = "/etc/dnsmasq.d";
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
volumes = {
|
||||
data.persistentVolumeClaim.claimName = "pihole-data";
|
||||
dnsmasq.persistentVolumeClaim.claimName = "pihole-dnsmasq";
|
||||
};
|
||||
|
||||
securityContext = {
|
||||
fsGroup = 1000;
|
||||
fsGroupChangePolicy = "OnRootMismatch";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
services = {
|
||||
pihole.spec = {
|
||||
type = "LoadBalancer";
|
||||
loadBalancerIP = globals.piholeIPv4;
|
||||
selector.app = "pihole";
|
||||
|
||||
ports = {
|
||||
dns = {
|
||||
protocol = "UDP";
|
||||
port = 53;
|
||||
targetPort = "dns";
|
||||
};
|
||||
|
||||
web = {
|
||||
port = 80;
|
||||
targetPort = "web";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
lab = {
|
||||
longhorn.persistentVolumeClaim = {
|
||||
pihole-data = {
|
||||
volumeName = "pihole-data";
|
||||
storage = "750Mi";
|
||||
};
|
||||
|
||||
pihole-dnsmasq = {
|
||||
volumeName = "pihole-dnsmasq";
|
||||
storage = "16Mi";
|
||||
};
|
||||
};
|
||||
|
||||
tailscaleIngresses.tailscale-pihole = {
|
||||
host = "pihole";
|
||||
service.name = "pihole";
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
|
@ -1,8 +1,6 @@
|
|||
freshrss:
|
||||
password: ENC[AES256_GCM,data:ECDPrW+VgO8PY9p2fLIreRETNiRL5ZGnu/PMC7aNj8KaWfyNYL+l3w==,iv:srR/r1EtOpC/CKKrCDKcTLVdMFPAYIJIB1CCg8mS0UU=,tag:YN4PqR5uvPkVskpJWD+91g==,type:str]
|
||||
oidc_crypto_key: ENC[AES256_GCM,data:dFQKZtFVd5l8W2go6WcK76o7O7hpQWnQKXCGTf9EhSVURvWigv6zzBULie7Y4lkJCsItG8oKmIiCYSy3MhFnU3DJTUJcenm4I7NHyINjvzHOBgUVPXbYQjQhouJwOlPkdqlSKv1f38ItZKNPJebMObZj+kACKbjdik6e6yM40RM=,iv:g6Ygval2qTQwKnrliI+n/r9OxJFePT9MKYyBLU6b3UQ=,tag:kWXTbm2JIR5aL/s4OX2Tqg==,type:str]
|
||||
pihole:
|
||||
password: ENC[AES256_GCM,data:MA60825Tl6aYEFVoPgo8k5Vjb9zmIxtPLJriQV1B3P1bOKu1KK7vxQ==,iv:RGZHox8CbJiEEEjMo2k/tNbtjCPy/QY7vOuMN/YNZcg=,tag:yphrq03IKpXM/tSDBLeSgA==,type:str]
|
||||
hedgedoc:
|
||||
databaseURL: ENC[AES256_GCM,data:6+IV4TaClIGE1XVkUf7JwXzqx3EvWiIKFx9X5x7QKvQKC7bIieD1ADVeAMQmiQfibnH/YV5TgjNY8Ft+3eX881c3yD+2j7mM+O1fX6taK/BCokDnqhIwTN2qxHsu+mrPcM/Pgg5Zqy8HvUgX8jM=,iv:bCwuNk5CVgK2T5IgLebcKwxwloi6FkWMWhnxwJek1GM=,tag:UDQ0KmRDVlDh35Fjm6eaAA==,type:str]
|
||||
sessionSecret: ENC[AES256_GCM,data:7FdRjAShjjue1fFwizCgK+94mkbT4ohAPxdyn/8Z8/f2nvGWPZHO/hGexOixbRGLPewJSaMunTMeJL+IzFlGlg==,iv:iz7640b8Mlb6mNps20b+TbphWDEFUbKwKNUXc0kR5NY=,tag:fdEr1tbes1h8VCA/q+0sOw==,type:str]
|
||||
|
@ -81,8 +79,8 @@ sops:
|
|||
azR0UkJyL0RwUVk4ZzdkSWptcDlWVjAK5FU9B5TBSnV3azO4eCv13T6i3dGGuI68
|
||||
UgBrVEb1/Fv+4XTjeSEhpiOaH8sNWYoNa3Aa7uTZYlHDRWga2GC7zw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
lastmodified: "2025-02-15T15:37:53Z"
|
||||
mac: ENC[AES256_GCM,data:tsoDYbuhxEH3PrxOPgfKczD8Hh1XGJRhGAtm2DWpPP9T99ub/l3KAV2pInvUi5Kn+1QvhJUAwFAP6A/435cqfsHxQI066N7ADUYO4qshcsAYKK7ofBVNnI431D3oD+kBujWKmvSqhlamdP+O7O1ICtbfI5PEM8SN5KWEvEtyp9A=,iv:pDiPy6EWLaZQbNydRFTktRlcf7M9Uf8OS+WPbQkUx9M=,tag:D+tMTFVbWE7TQIw/0MUZjw==,type:str]
|
||||
lastmodified: "2025-05-26T20:32:01Z"
|
||||
mac: ENC[AES256_GCM,data:si28Fu1crF2mYYCJAgN95+G8iJkn4T9wF0Itpi+5cjoSZ2ebxm2wWnVLQ9PwLIkHVF7nNbQM4fWy3eGIWWpexW6ReEc/aGJBLM0L4ho7iFaO1tzWEa5nTyz3QQH8kap1xvqEYgwH9EDkblc4gFpCUDnYbBt9lNcRCZ3JzeYoPxQ=,iv:QHsvuyCCn+9oe5ZQJi2/qDtV7Z2N4JMfqXUEqJkzKH4=,tag:2NGB4VR5bPEZmIC/lYX2VQ==,type:str]
|
||||
pgp: []
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.9.4
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue