enable adguard home

hosts/h001/flake.nix

@@ -37,6 +37,7 @@
                 {
                   environment.systemPackages = with pkgs; [
                     lua
+                    sqlite
                   ];
 
                   ringofstorms_common = {

hosts/h001/mods/adguardhome.nix

@@ -6,7 +6,33 @@
     services.adguardhome = {
       enable = true;
       allowDHCP = true;
-      openFirewall = true;
+      openFirewall = false;
+    };
+
+    networking.firewall.allowedTCPPorts = [
+      53
+      67
+      68
+      5543
+    ];
+    networking.firewall.allowedUDPPorts = [
+      53
+      67
+      68
+      784
+      853
+      8853
+      5443
+    ];
+
+    services.nginx = {
+      virtualHosts = {
+        "h001.net.joshuabell.xyz  " = {
+          locations."/" = {
+            proxyPass = "http://localhost:3000";
+          };
+        };
+      };
     };
   };
 }