flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1687871164,
-        "narHash": "sha256-bBFlPthuYX322xOlpJvkjUBz0C+MOBjZdDOOJJ+G2jU=",
+        "lastModified": 1687647567,
+        "narHash": "sha256-Ua90LZYJO7/7KW/KK/AqijhIekd+wxPwbVKXuBYzJeQ=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "07c347bb50994691d7b0095f45ebd8838cf6bc38",
+        "rev": "6ca1e16eb3016c94b7ac16699e1d4158bd4e39a4",
         "type": "github"
       },
       "original": {
@@ -23,11 +23,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1690179384,
-        "narHash": "sha256-+arbgqFTAtoeKtepW9wCnA0njCOyoiDFyl0Q0SBSOtE=",
+        "lastModified": 1687681650,
+        "narHash": "sha256-M2If+gRcfpmaJy/XbfSsRzLlPpoU4nr0NHnKKl50fd8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b12803b6d90e2e583429bb79b859ca53c348b39a",
+        "rev": "1c9db9710cb23d60570ad4d7ab829c2d34403de3",
         "type": "github"
       },
       "original": {
@@ -39,11 +39,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1690298576,
-        "narHash": "sha256-RLgIGS04t4Rd0viqsx2e9dGViKB6nVsGmO11EagCWmM=",
+        "lastModified": 1687787337,
+        "narHash": "sha256-+OROprXvGAeFG8oHogwCR2E/PmWE4d6CSoTyGw0CQhw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "88f63d511092e95d28e9a7c98534595c53de1048",
+        "rev": "09798f0dd4c11b431765275893d9d395c1e203b8",
         "type": "github"
       },
       "original": {

hosts/architect/dns.nix

@@ -40,7 +40,7 @@ in
     adguardhome = {
       enable = true;
       settings = {
-        bind_port = 5354;
+        bind_port = 5353;
         dns = {
           port = 5300;
         };
@@ -50,26 +50,5 @@ in
         ];
       };
     };
-
-    dnscrypt-proxy2 = {
-      enable = true;
-      settings = {
-        listen_addresses = [ "127.0.0.1:5353" ];
-        ipv4_servers = true;
-        ipv6_servers = false;
-        block_ipv6 = true;
-        dnscrypt_servers = true;
-        doh_servers = true;
-        require_nolog = true;
-        require_nofilter = true;
-        timeout = 350;
-        lb_strategy = "p4";
-        lb_estimator = true;
-        ignore_system_dns = true;
-        fallback_resolvers = [ "1.1.1.1:53" "9.9.9.9:53" ];
-        cache_min_ttl = 60;
-        cache_max_ttl = 360;
-      };
-    };
   };
 }

hosts/architect/headscale.nix

@@ -4,8 +4,6 @@ let
   domain = "vipienne.giugl.io";
 in
 {
-  environment.systemPackages = [ pkgs.headscale ];
-
   architect.firewall = {
     openUDP = [ config.services.tailscale.port ];
   };