Commit Graph

24 Commits

Author SHA1 Message Date
Eli Ribble c953a3b798 Add static local IPv6 address.
This gives me something that the router can point to for DNS resolution
for other devices on the network.
2024-08-16 17:48:20 -07:00
Eli Ribble 5848437e3f Disable the stub resolved listener.
I want pihole to bind all available addresses itself, without listing
them, so I need all the port 53s to be free on all addresses. This will
also mean that the server itself will go through pihole.
2024-08-16 17:47:25 -07:00
Eli Ribble 5bed23c073 Add lsof.
Useful tool to check what is using port 53.
2024-08-16 17:47:09 -07:00
Eli Ribble 5e9e93361a Remove the unnecessary network config options.
Turns out my router advertises enough to do the right thing without
this.
2024-08-16 16:35:49 -07:00
Eli Ribble 67cee9d1f3 Quick checkpoint of work on networking.
It cost about 2 hours to figure this out from reading the networkd.nix
definition. It doesn't actually do what I need it to do, however,
because I misunderstood what I need. Still though, I want to save it
since it was so hard-earned.
2024-08-16 16:30:53 -07:00
Eli Ribble 73c9593bfe Switch to systemd.networkd for network config.
Turns out the other method, the default method, is a series of bash
scripts (?). That's according to online documentation. By switching to
using networkd I can get proper declarative network configuration. With
this config I'm getting an IPv6 address from my router that is globally
routable, and another address that is static that I can let the router
configure for users of the local network to reach the pihole for IPv6.
2024-08-15 21:34:13 -07:00
Eli Ribble e2ff975a7c Enable mosh.
Mosh gives me the ability to deal with the fact that my connection over
my own wifi is dropping packets for up to 10 seconds at a time.
2024-08-15 21:31:37 -07:00
Eli Ribble 6271f38fff Add failed attempt at static IPv6 address.
I feel like I'm close, but this doesn't work.
The problem is when I add this no IPv6 requests can route, in or out.
2024-08-15 14:46:40 -07:00
Eli Ribble db5549cff7 Add a simple systemd unit for running the scan uploader
I've manually redacted the api key until I can figure out a solution
that I like for keeping the key out of the configuration itself.

This depends a great deal on setting up the source code in the right
place and the right way. Specifically cloning the repository to
/opt/src/scan-uploader, creating a virtual environment at
/opt/src/scan-uploader/ve and installing the package with `pip install
-e .` such that the `scan-uploader` entrypoint is properly created.
2024-07-31 17:33:53 -07:00
Eli Ribble f9fe2379f4 Add the poetry package.
Useful for developing Python code
2024-07-31 13:04:03 -07:00
Eli Ribble 777ec57f69 Add eliribble to the scanner group
Makes it easier to cleanup scans
2024-07-31 13:03:48 -07:00
Eli Ribble 8523f092d0 Set the correct timezone
Useful for setting the date and time of an upload.
2024-07-31 13:03:23 -07:00
Eli Ribble deb6c42c64 Simplify samba, make it work.
There's various things I did wrong in the first setup, but that's okay
since I was just copying from the wiki to understand how to get things
started. I could never get smbclient to connect to any of these shares
for any users.

Rather, I'm using this minimalist configuration from the samba project
itself, and I can connect to it, so long as the directory is created and
belongs to the correct group. Which it does now.

Hat tip to https://discourse.nixos.org/t/nixos-configuration-for-samba/17079
for the guidance.
2024-07-31 17:31:17 +00:00
Eli Ribble 7970d9f911 Allow pings to ensure the home is up.
Just convenient, not that unsafe.
2024-07-31 17:06:25 +00:00
Eli Ribble 4dd10a99a1 Add resolution for this server to itself.
Within my home networks home.arpa resolves to DNS for the home domain.
From there the pihole service will provide DNS for all the connected
clients and custom service names.
2024-07-31 17:05:26 +00:00
Eli Ribble 6763a973a0 Add basic Samba config for the scanner
This allows the scanner to log into samba with its own username and
password.
2024-07-31 17:04:56 +00:00
Eli Ribble b31ab6e7ca Move pihole to the RFC-based home.arpa domain 2024-07-22 19:49:22 +00:00
Eli Ribble 82dfc79b64 Open necessary firewall ports for serving web requests 2024-07-22 19:49:22 +00:00
Eli Ribble 9030577f20 Add support for StepCA for certificates 2024-07-22 19:49:22 +00:00
Eli Ribble 4b2058091b Add nginx, with basic config for pihole.
This probably should be reworked so it has a better structure, but this
will work for a first pass.
2024-07-22 19:49:22 +00:00
Eli Ribble a818c22412 Add pihole to NixOS, using NixOS container specifiers 2024-07-22 19:49:22 +00:00
Eli Ribble 0302155566 Add dig for debugging the pihole dns 2024-07-22 19:49:22 +00:00
Eli Ribble 4971dec157 Switch quite to podman from docker.
I'm more used to it, and I find docker's history to be questionable
2024-07-22 19:49:22 +00:00
Eli Ribble 0f12915de4 Make sync put the config files under etc/nixos
This makes it easier to add other files from other directories
2024-07-22 19:49:22 +00:00