module(pihole-container): add option declarations for the module + add module to flake
This commit is contained in:
Christopher Bacher
parent
ef77de3abd
commit
1b5d13c510
2 changed files with 243 additions and 0 deletions
|
|
@ -17,6 +17,7 @@
|
|||
${system.x86_64-linux}.pihole = imageBaseInfo // {
|
||||
arch = "amd64";
|
||||
sha256 = "sha256-5FUtafW2YdTfOfA0ieiyJasMUYEGReOMQ4PGZ8e32hY=";
|
||||
# name = # final image name can be set here
|
||||
};
|
||||
|
||||
${system.aarch64-linux}.pihole = imageBaseInfo // {
|
||||
|
|
@ -33,6 +34,8 @@
|
|||
default = piholeImage;
|
||||
};
|
||||
|
||||
nixosModule = import ./modules/pihole-container.nix;
|
||||
|
||||
devShells.default = let
|
||||
updatePiholeImageInfoScript = pkgs.writeShellScriptBin "update-pihole-image-info" ''
|
||||
INSPECT_RESULT=`skopeo inspect "docker://${imageName}:latest"`
|
||||
|
|
|
|||
240
modules/pihole-container.nix
Normal file
240
modules/pihole-container.nix
Normal file
|
|
@ -0,0 +1,240 @@
|
|||
{ config, pkgs, lib, ... }: with lib; let
|
||||
mkHostPortsOption = { service, publicDefaultPort }: {
|
||||
host-internal-port = mkOption {
|
||||
type = types.port;
|
||||
description = ''
|
||||
The internal port on the host on which the ${service} port of the pihole container should be exposed.
|
||||
Only needs to be specified if he container port should be exposed
|
||||
or if the port-forwarding for this service is enabled.
|
||||
'';
|
||||
};
|
||||
|
||||
host-public-port = mkOption {
|
||||
type = types.port;
|
||||
description =
|
||||
"The public port on the host on which the ${service} port of the pihole container should be forwared to.";
|
||||
default = publicDefaultPort;
|
||||
};
|
||||
|
||||
forward-public-to-internal = mkOption {
|
||||
type = types.bool;
|
||||
descripton = ''
|
||||
Enable port-forwarding between the public & the internal port of the host.
|
||||
This effectively makes pihole's ${service} port available on the network to which the host is connected to.
|
||||
'';
|
||||
default = false;
|
||||
};
|
||||
};
|
||||
|
||||
in {
|
||||
options = {
|
||||
services.piholeRootlessContainer = {
|
||||
enable = mkEnableOption "PiHole as a rootless podman container";
|
||||
|
||||
hostConfig = {
|
||||
user = mkOption {
|
||||
type = types.str;
|
||||
description = ''
|
||||
The username of the user on the host which should run the pihole container.
|
||||
Needs to be able to run rootless podman.
|
||||
'';
|
||||
};
|
||||
|
||||
volumesPath = mkOption {
|
||||
type = types.path;
|
||||
description = ''
|
||||
The path where the persistent data of the pihole container should be stored.
|
||||
The different used volumes are created automatically.
|
||||
Needs to be writable by the user running the pihole container.
|
||||
'';
|
||||
example = /home/pihole-user/pihole-volumes;
|
||||
};
|
||||
|
||||
dns = mkHostPortsOption {
|
||||
service = "DNS";
|
||||
publicDefaultPort = 53;
|
||||
};
|
||||
|
||||
dhcp = mkHostPortsOption {
|
||||
service = "DHCP";
|
||||
publicDefaultPort = 67;
|
||||
};
|
||||
|
||||
web = mkHostPortsOption {
|
||||
service = "Web";
|
||||
publicDefaultPort = 80;
|
||||
};
|
||||
};
|
||||
|
||||
|
||||
piholeConfiguration = {
|
||||
tz = mkOption {
|
||||
type = types.str;
|
||||
description = "Set your timezone to make sure logs rotate at local midnight instead of at UTC midnight.";
|
||||
default = config.time.timeZone;
|
||||
};
|
||||
|
||||
web = {
|
||||
password = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = ''
|
||||
The password for the pihole admin interface.
|
||||
If not given a random password will be generated an can be retrieved from the service logs.
|
||||
'';
|
||||
default = null;
|
||||
};
|
||||
|
||||
# password-file
|
||||
|
||||
virtual-host = mkOption {
|
||||
type = type.str;
|
||||
description = "What your web server 'virtual host' is, accessing admin through this Hostname/IP allows you to make changes to the whitelist/blacklists in addition to the default 'http://pi.hole/admin/' address";
|
||||
};
|
||||
|
||||
layout = mkOption {
|
||||
type = types.enum [ "boxed" "traditional" ];
|
||||
description = "Use boxed layout (helpful when working on large screens)";
|
||||
default = "boxed";
|
||||
};
|
||||
|
||||
theme = mkOption {
|
||||
type = types.enum [ "default-dark" "default-darker" "default-light" "default-auto" "lcars" ];
|
||||
description = "User interface theme to use.";
|
||||
default = "default-light";
|
||||
};
|
||||
};
|
||||
|
||||
dns = {
|
||||
upstreamServers = mkOption {
|
||||
type = with types; nullOr (listOf str);
|
||||
description = ''
|
||||
Upstream DNS server(s) for Pi-hole to forward queries to.
|
||||
(supports non-standard ports with #[port number]) e.g [ "127.0.0.1#5053" "8.8.8.8" "8.8.4.4" ]
|
||||
(supports Docker service names and links instead of IPs) e.g [ "upstream0" "upstream1" ] where upstream0 and upstream1 are the service names of or links to docker services.
|
||||
|
||||
Note: The existence of this environment variable assumes this as the sole management of upstream DNS.
|
||||
Upstream DNS added via the web interface will be overwritten on container restart/recreation.
|
||||
'';
|
||||
default = null;
|
||||
};
|
||||
|
||||
dnssec = mkOption {
|
||||
type = types.bool;
|
||||
description = "Enable DNSSEC support";
|
||||
default = false;
|
||||
};
|
||||
|
||||
bogusPriv = mkOption {
|
||||
type = types.bool;
|
||||
description = "Never forward reverse lookups for private ranges.";
|
||||
default = true;
|
||||
};
|
||||
|
||||
fqdnRequired = mkOption {
|
||||
type = types.bool;
|
||||
description = "Never forward non-FQDNs.";
|
||||
default = true;
|
||||
};
|
||||
};
|
||||
|
||||
revServer = {
|
||||
enable = mkOption {
|
||||
type = types.bool;
|
||||
description = "Enable DNS conditional forwarding for device name resolution.";
|
||||
default = false;
|
||||
};
|
||||
|
||||
domain = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "If conditional forwarding is enabled, set the domain of the local network router.";
|
||||
default = null;
|
||||
};
|
||||
|
||||
target = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "If conditional forwarding is enabled, set the IP of the local network router.";
|
||||
default = null;
|
||||
};
|
||||
|
||||
cidr = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "If conditional forwarding is enabled, set the reverse DNS zone (e.g. 192.168.0.0/24)";
|
||||
default = null;
|
||||
};
|
||||
};
|
||||
|
||||
dhcp = {
|
||||
enable = mkOption {
|
||||
type = types.bool;
|
||||
description = ''
|
||||
Enable DHCP server.
|
||||
Static DHCP leases can be configured with a custom /etc/dnsmasq.d/04-pihole-static-dhcp.conf
|
||||
'';
|
||||
default = false;
|
||||
};
|
||||
|
||||
|
||||
start = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "Start of the range of IP addresses to hand out by the DHCP server (mandatory if DHCP server is enabled).";
|
||||
default = null;
|
||||
example = "192.168.0.10";
|
||||
};
|
||||
|
||||
end = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "End of the range of IP addresses to hand out by the DHCP server (mandatory if DHCP server is enabled).";
|
||||
default = null;
|
||||
example = "192.168.0.20";
|
||||
};
|
||||
|
||||
router = mkOption {
|
||||
type = with types; nullOr str;
|
||||
description = "Router (gateway) IP address sent by the DHCP server (mandatory if DHCP server is enabled).";
|
||||
default = null;
|
||||
example = "192.168.0.1";
|
||||
};
|
||||
|
||||
leasetime = mkOption {
|
||||
type = types.int;
|
||||
description = "DHCP lease time in hours.";
|
||||
default = 24;
|
||||
};
|
||||
|
||||
domain = mkOption {
|
||||
type = types.str;
|
||||
description = "Domain name sent by the DHCP server.";
|
||||
default = "lan";
|
||||
};
|
||||
|
||||
ipv6 = mkOption {
|
||||
type = types.bool;
|
||||
description = "Enable DHCP server IPv6 support (SLAAC + RA).";
|
||||
default = false;
|
||||
};
|
||||
|
||||
rapid-commit = mkOption {
|
||||
type = types.bool;
|
||||
description = "Enable DHCPv4 rapid commit (fast address assignment).";
|
||||
default = false;
|
||||
};
|
||||
};
|
||||
|
||||
queryLogging = mkOption {
|
||||
type = types.bool;
|
||||
description = "Enable query logging or not.";
|
||||
default = true;
|
||||
};
|
||||
|
||||
temperatureUnit = mkOption {
|
||||
type = types.enum [ "c" "k" "f" ];
|
||||
description = "Set preferred temperature unit to c: Celsius, k: Kelvin, or f Fahrenheit units.";
|
||||
default = "c";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
config = {
|
||||
};
|
||||
}
|
||||
Loading…
Add table
Reference in a new issue