Get pihole listening on the local IPv4 and IPv6 addresses.

I'm not sure if the defaultNetwork subnet changes are necessary, I was trying
lots of stuff. There are some whitespace changes as well, don't get
distracted by them.

Most critically the --network=bridge is and the dns_enabled=false avoid
starting the aardvark-dns thing that podman does for internal dns on
port 53 and make it so the container gets the IPv6 address for listening
to incoming requests.

quinn/etc/nixos/configuration.nix

@@ -92,6 +92,7 @@
     fish
     git
     htop
+    lsof
     #mongodb
     neovim
     nginx
@@ -119,6 +120,7 @@
   #   enable = true;
   #   enableSSHSupport = true;
   # };
+  programs.mosh.enable = true;
 
   # Make neovim the default editor
   programs.neovim.enable = true;
@@ -133,7 +135,7 @@
       enableACME = false;
       locations."/".extraConfig = ''
         proxy_pass http://127.0.0.1:10000;
-	client_body_buffer_size 128k;
+        client_body_buffer_size 128k;
         client_max_body_size 10G;
 
         #Timeout if the real server is dead
@@ -181,15 +183,12 @@
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
 
-  # Enable radvd for advertising IPv6 local addresses
+  # Disable the resolved stub listener, let Pihole do it
-  #services.radvd.config = ''
+  services.resolved = {
-    #interface enp2s0 {
+    extraConfig = ''
-      #AdvDefaultLifetime 0;
+      DNSStubListener=no
-      #AdvSendAdvert on;
+    '';
-      #prefix fc00::5/48 { };
+  };
-    #};
-  #'';
-  #services.radvd.enable = true;
 
   # Set up a samba share for the scanner
   services.samba = {
@@ -232,12 +231,7 @@
     ];
   };
 
-  #networking.interfaces = {
+  networking.useNetworkd = true;
-    #enp2s0.ipv6.addresses = [{
-      #address = "fc00:0000:000::5";
-      #prefixLength = 48;
-    #}];
-  #};
   # Copy the NixOS configuration file and link it from the resulting system
   # (/run/current-system/configuration.nix). This is useful in case you
   # accidentally delete configuration.nix.
@@ -262,6 +256,31 @@
   # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
   system.stateVersion = "24.05"; # Did you read the comment?
 
+  systemd.network.enable = true;
+  systemd.network.networks."10-wan" = {
+    matchConfig.Name = "enp2s0";
+    networkConfig = {
+      # start a DHCP Client for IPv4 Addressing/Routing
+      DHCP = "ipv4";
+      # accept Router Advertisements for Stateless IPv6 Autoconfiguraton (SLAAC)
+      IPv6AcceptRA = true;
+    };
+    addresses = [{
+      addressConfig = {
+        Address="fd00::2/64";
+      };
+    } {
+      addressConfig = {
+        Address="::/0";
+	Scope="global";
+      };
+    }];
+
+
+    # make routing on this interface a dependency for network-online.target
+    linkConfig.RequiredForOnline = "routable";
+  };
+
   systemd.services.scan-uploader = {
     enable = true;
     wantedBy = [ "multi-user.target" ];
@@ -286,23 +305,35 @@
       autoStart = true;
       environment = {
         TZ = "America/Phoenix";
-	DNSMASQ_LISTENING = "all";
+        DNSMASQ_LISTENING = "all";
       };
+      extraOptions = ["--network=bridge"];
       image = "docker.io/pihole/pihole:2024.07.0";
       ports = [
-	"192.168.1.5:53:53/tcp"
+        "53:53/tcp"
-	"192.168.1.5:53:53/udp"
+        "53:53/udp"
-	"192.168.1.5:67:67"
+        "67:67"
-	"127.0.0.1:10000:80"
+        "127.0.0.1:10000:80"
       ];
       volumes = [
         "/etc/pihole/config:/etc/pihole"
-	"/etc/pihole/dnsmasq.d:/etc/dnsmasq.d"
+        "/etc/pihole/dnsmasq.d:/etc/dnsmasq.d"
       ];
     };
   };
   virtualisation.podman.enable = true;
   virtualisation.podman.dockerSocket.enable = true;
-  virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
+  virtualisation.podman.defaultNetwork.settings = {
+    dns_enabled = false;
+    ipv6_enabled = true;
+    subnets = [{
+      gateway = "10.88.0.1";
+      subnet = "10.88.0.0/16";
+    }
+    {
+      gateway = "fd00::1:8:1";
+      subnet = "fd00::1:8:0/122";
+    }];
+  };
 }