ulveandClaude Sonnet 5 4045f25aee Add Pi-hole DNS blocking + TV lockdown, new services, flake upgrade ...

- Enable pihole-ftl/pihole-web for network-wide DNS ad-blocking on the
  LAN/Tailscale side, keeping nixserve's own resolution untouched
- Seed a dedicated Pi-hole group that locks the smart TV (by MAC) to
  resolving only *.maybec.at, denying everything else
- Add pingvin-share, frigate, mosquitto, and homeassistant docker services
  with matching nginx vhosts and firewall port for Home Assistant
- Disable immich (unused for now), add proxySsl option to proxyVhost
- Bump flake.lock (nixpkgs/home-manager upgrade)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-29 07:16:27 +02:00

config

use nh for rebuild alias; update noctalia color scheme

2026-08-02 10:10:52 +02:00

hosts

Add Pi-hole DNS blocking + TV lockdown, new services, flake upgrade

2026-09-29 07:16:27 +02:00

modules

gita and upgrade

2026-08-24 14:06:13 +02:00

templates

remove unused shell templates and fix nix-shell prompt

2026-06-18 23:21:20 +02:00

.gitignore

New server

2026-07-08 11:07:44 +02:00

flake.lock

Add Pi-hole DNS blocking + TV lockdown, new services, flake upgrade

2026-09-29 07:16:27 +02:00

flake.nix

use codeberg remote for rssdownloader-src input

2026-08-02 10:19:57 +02:00

S

Description

No description provided

791 MiB

Languages

Nix 64.7%

Lua 32.4%

Shell 1.7%

CSS 1.2%