Replace pihole with adguardhome

ServeNix/configuration.nix

@@ -11,8 +11,15 @@
     ./hardware-configuration.nix
     <home-manager/nixos>
 
-    # General
+    # DNS (required for internet)
+    ./services/adguard.nix
+    # ./services/pihole.nix
+
+    # My own stuff
     ./services/airsignal.nix
+    ./services/heidi.nix
+
+    # General
     ./services/authelia.nix
     ./services/gitea.nix
     ./services/gitea-runner.nix
@@ -22,15 +29,11 @@
     ./services/memos.nix
     ./services/nextcloud.nix
     ./services/nginx-proxy-manager.nix
-    ./services/pihole.nix
     ./services/portainer.nix
     ./services/uptime-kuma.nix
     ./services/whats-up-docker.nix
     ./services/wireguard-vps.nix
 
-    # Discord
-    ./services/heidi.nix
-
     # MultimediArr
     ./services/bazarr.nix
     ./services/fileflows.nix

ServeNix/services/adguard.nix

@@ -0,0 +1,49 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: {
+  virtualisation.oci-containers.containers.adguard = {
+    image = "adguard/adguardhome";
+    autoStart = true;
+
+    dependsOn = [];
+
+    ports = [
+      # DNS server
+      "53:53/tcp"
+      "53:53/udp"
+      "853:853/tcp" # DNS over TLS
+      "853:853/udp" # DNS over QUIC
+
+      # DHCP server
+      # "67:67/udp"
+      # "68:68/tcp"
+      # "68:68/udp"
+
+      # Admin panel + DNS over HTTPS
+      # "80:80/tcp"
+      # "443:443/tcp"
+      # "443:443/udp"
+      # "3100:3000/tcp" # Web interface
+
+      # DNSCrypt
+      # "5443:5443/tcp"
+      # "5443:5443/udp"
+
+      # "6060:6060/tcp" # Debugging
+    ];
+
+    volumes = [
+      "adguard_config:/opt/adguardhome/conf"
+      "adguard_work:/opt/adguardhome/work"
+    ];
+
+    environment = {};
+
+    extraOptions = [
+      "--net=behind-nginx"
+    ];
+  };
+}