135 lines
3.5 KiB
Nix
135 lines
3.5 KiB
Nix
{
|
|
name = "adguardhome";
|
|
|
|
nodes = {
|
|
nullConf = { ... }: { services.adguardhome = { enable = true; }; };
|
|
|
|
emptyConf = { lib, ... }: {
|
|
services.adguardhome = {
|
|
enable = true;
|
|
};
|
|
};
|
|
|
|
declarativeConf = { ... }: {
|
|
services.adguardhome = {
|
|
enable = true;
|
|
|
|
mutableSettings = false;
|
|
settings = {
|
|
schema_version = 0;
|
|
dns = {
|
|
bind_host = "0.0.0.0";
|
|
bootstrap_dns = "127.0.0.1";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
mixedConf = { ... }: {
|
|
services.adguardhome = {
|
|
enable = true;
|
|
|
|
mutableSettings = true;
|
|
settings = {
|
|
schema_version = 0;
|
|
dns = {
|
|
bind_host = "0.0.0.0";
|
|
bootstrap_dns = "127.0.0.1";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
dhcpConf = { lib, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
|
|
networking = {
|
|
# Configure static IP for DHCP server
|
|
useDHCP = false;
|
|
interfaces."eth1" = lib.mkForce {
|
|
useDHCP = false;
|
|
ipv4 = {
|
|
addresses = [{
|
|
address = "10.0.10.1";
|
|
prefixLength = 24;
|
|
}];
|
|
|
|
routes = [{
|
|
address = "10.0.10.0";
|
|
prefixLength = 24;
|
|
}];
|
|
};
|
|
};
|
|
|
|
# Required for DHCP
|
|
firewall.allowedUDPPorts = [ 67 68 ];
|
|
};
|
|
|
|
services.adguardhome = {
|
|
enable = true;
|
|
allowDHCP = true;
|
|
mutableSettings = false;
|
|
settings = {
|
|
schema_version = 0;
|
|
dns = {
|
|
bind_host = "0.0.0.0";
|
|
bootstrap_dns = "127.0.0.1";
|
|
};
|
|
dhcp = {
|
|
# This implicitly enables CAP_NET_RAW
|
|
enabled = true;
|
|
interface_name = "eth1";
|
|
local_domain_name = "lan";
|
|
dhcpv4 = {
|
|
gateway_ip = "10.0.10.1";
|
|
range_start = "10.0.10.100";
|
|
range_end = "10.0.10.101";
|
|
subnet_mask = "255.255.255.0";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
client = { lib, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
networking = {
|
|
interfaces.eth1 = {
|
|
useDHCP = true;
|
|
ipv4.addresses = lib.mkForce [ ];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
with subtest("Minimal (settings = null) config test"):
|
|
nullConf.wait_for_unit("adguardhome.service")
|
|
|
|
with subtest("Default config test"):
|
|
emptyConf.wait_for_unit("adguardhome.service")
|
|
emptyConf.wait_for_open_port(3000)
|
|
|
|
with subtest("Declarative config test, DNS will be reachable"):
|
|
declarativeConf.wait_for_unit("adguardhome.service")
|
|
declarativeConf.wait_for_open_port(53)
|
|
declarativeConf.wait_for_open_port(3000)
|
|
|
|
with subtest("Mixed config test, check whether merging works"):
|
|
mixedConf.wait_for_unit("adguardhome.service")
|
|
mixedConf.wait_for_open_port(53)
|
|
mixedConf.wait_for_open_port(3000)
|
|
# Test whether merging works properly, even if nothing is changed
|
|
mixedConf.systemctl("restart adguardhome.service")
|
|
mixedConf.wait_for_unit("adguardhome.service")
|
|
mixedConf.wait_for_open_port(3000)
|
|
|
|
with subtest("Testing successful DHCP start"):
|
|
dhcpConf.wait_for_unit("adguardhome.service")
|
|
client.wait_for_unit("network-online.target")
|
|
# Test IP assignment via DHCP
|
|
dhcpConf.wait_until_succeeds("ping -c 5 10.0.10.100")
|
|
# Test hostname resolution over DHCP-provided DNS
|
|
dhcpConf.wait_until_succeeds("ping -c 5 client.lan")
|
|
'';
|
|
}
|