From 9ceddb33272e5fca6382c1b4dec2074bd1167738 Mon Sep 17 00:00:00 2001 From: Karan Jayachandra Date: Sat, 18 Jul 2026 23:04:53 +0200 Subject: Simplify config and add AdGuard DoH/DoT support - Replace the hand-rolled Podman OCI container for Actual Budget with the native services.actual module (available in the pinned nixpkgs release); the container never actually had a backend enabled, so it likely never ran. - Collapse cgit's Caddy routing to a single reverse proxy - the smart-HTTP git backend was already served on the same nginx vhost/port as cgit itself, so the separate /git/* -> 8085 route was dead and pointed at a port nothing listened on. - Drop the unused kvm-intel kernel module from the guest hardware profile, and rename disko's misleadingly-named ESP partition (it's ext4, not a real EFI System Partition). - Point common.nix's disabled autoUpgrade flake URL at this repo's own cgit hosting instead of a generic GitHub placeholder. - Add AdGuard Home DNS-over-TLS (853) and DNS-over-HTTPS (8443) support, backed by an independent ACME certificate (modules/acme.nix) issued via a webroot Caddy serves on port 80. Co-Authored-By: Claude Sonnet 5 --- hosts/eurovm/disko.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'hosts/eurovm/disko.nix') diff --git a/hosts/eurovm/disko.nix b/hosts/eurovm/disko.nix index d1ec85c..5176340 100644 --- a/hosts/eurovm/disko.nix +++ b/hosts/eurovm/disko.nix @@ -20,8 +20,10 @@ priority = 1; }; - # 512 MiB /boot - keeps kernels/initrds out of root for clarity - ESP = { + # 512 MiB /boot - keeps kernels/initrds out of root for clarity. + # Not a real EFI System Partition (ext4, not FAT32/type EF00) - + # this is a BIOS-boot setup, GRUB just needs a plain filesystem here. + bootfs = { size = "512M"; type = "8300"; content = { -- cgit v1.3.1