Commit Graph
11 Commits
Author SHA1 Message Date
ulve 1550e333e0 nixserve: open Music Assistant/mDNS ports, add paperless service, bump flake inputs
Allow TCP 8095 (Music Assistant web UI) and UDP 5353 (mDNS) through the
firewall so the LAN interface can reach it and Chromecast discovery works;
previously only the trusted tailscale0 interface had access.
2026-10-12 09:08:52 +02:00
ulveandClaude Sonnet 5 4045f25aee Add Pi-hole DNS blocking + TV lockdown, new services, flake upgrade
- Enable pihole-ftl/pihole-web for network-wide DNS ad-blocking on the
  LAN/Tailscale side, keeping nixserve's own resolution untouched
- Seed a dedicated Pi-hole group that locks the smart TV (by MAC) to
  resolving only *.maybec.at, denying everything else
- Add pingvin-share, frigate, mosquitto, and homeassistant docker services
  with matching nginx vhosts and firewall port for Home Assistant
- Disable immich (unused for now), add proxySsl option to proxyVhost
- Bump flake.lock (nixpkgs/home-manager upgrade)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-29 07:16:27 +02:00
ulve bd1883552e gita and upgrade 2026-08-24 14:06:13 +02:00
ulve 4dc26ccc2f upgrade 2026-08-09 10:27:06 +02:00
ulve af6e5b99cd added rss downloader 2026-08-01 12:03:22 +02:00
ulve ae789a2006 Cleanup 2026-07-16 13:28:25 +02:00
ulve b13f4fc9ad exitnode and docker gc 2026-07-12 10:21:16 +02:00
ulve 2b97810a21 Added phone login and dazzle 2026-07-11 14:03:27 +02:00
ulve abfd1b090d NFS share 2026-07-11 08:57:42 +02:00
ulve 6141e2b16b Added syncthing 2026-07-09 11:06:10 +02:00
ulve 3f8eacc9a8 Closer 2026-07-08 16:24:11 +02:00