From e50db4a7824608a44738bbb0fc0cc1ded191cd6c Mon Sep 17 00:00:00 2001
From: death916 <mail@trentnelson.dev>
Date: Thu, 26 Feb 2026 01:31:51 -0800
Subject: [PATCH] orac adg

---
 modules/nixos/orac/services.nix | 55 ++++++++++++++++++++++++++++++---
 nixos/orac.nix                  |  2 +-
 2 files changed, 52 insertions(+), 5 deletions(-)

diff --git a/modules/nixos/orac/services.nix b/modules/nixos/orac/services.nix
index 6a70719..9262c53 100644
--- a/modules/nixos/orac/services.nix
+++ b/modules/nixos/orac/services.nix
@@ -62,10 +62,57 @@
   services.postgresql = {
     enable = true;
     ensureDatabases = [ "forgejo" ];
-    ensureUsers = [{
-      name = "forgejo";
-      ensureDBOwnership = true;
-    }];
+    ensureUsers = [
+      {
+        name = "forgejo";
+        ensureDBOwnership = true;
+      }
+    ];
+  };
+
+  services.adguardhome = {
+    enable = true;
+    openFirewall = true;
+    mutableSettings = true;
+    settings = {
+      http = {
+        address = "127.0.0.1:3000";
+      };
+      dns = {
+        # bind_hosts = [
+        # "192.168.0.116"
+        # "100.65.36.116"
+        # ];
+        port = 53;
+        upstream_dns = [
+          "9.9.9.9"
+          "8.8.8.8"
+        ];
+        bootstrap_dns = [
+          "9.9.9.9"
+          "8.8.4.4"
+        ];
+      };
+      filtering = {
+        protection_enabled = true;
+        filtering_enabled = true;
+        parental_enabled = false;
+        safe_search = {
+          enabled = false;
+        };
+      };
+      filters =
+        lib.map
+          (url: {
+            enabled = true;
+            url = url;
+          })
+          [
+            "https://adguardteam.github.io/HostlistsRegistry/assets/filter_9.txt"
+            "https://adguardteam.github.io/HostlistsRegistry/assets/filter_11.txt"
+            "https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt"
+          ];
+    };
   };
 
   environment.systemPackages = with pkgs; [
diff --git a/nixos/orac.nix b/nixos/orac.nix
index 6c5efab..d137610 100644
--- a/nixos/orac.nix
+++ b/nixos/orac.nix
@@ -5,7 +5,7 @@
     ../modules/soju.nix
     ../modules/containers/docker/pangolin.nix
     # ../modules/forgejo.nix
-    # ../modules/adguard.nix
+    ../modules/adguard.nix
     ../modules/containers/docker/juicefs.nix
     ../modules/nixos/orac/restic.nix
     ../modules/containers/docker/karakeep/docker-compose.nix