router: option to disable desktop to save space

hosts/router/default.nix

@@ -1,6 +1,5 @@
 { config, lib, pkgs, ... }:
 let
-  vars = import ./vars.nix;
   enableDesktop = false;
 in
 {
@@ -11,7 +10,6 @@ in
       ./firewall.nix
       ./dns.nix
       ./kea.nix
-      ./glance.nix
       ./services.nix
     ];
   # Secrix for secrets management

hosts/router/dns.nix

@@ -42,12 +42,8 @@ in
 
   services.adguardhome.enable = true;
   services.adguardhome.mutableSettings = false;
-  # https://github.com/AdguardTeam/Adguardhome/wiki/Configuration
   services.adguardhome.settings = {
     dns = {
-      # Disable rate limit, default of 20 is too low
-      # https://github.com/AdguardTeam/AdGuardHome/issues/6726
-      ratelimit = 0;
       bootstrap_dns = [ "1.1.1.1" "9.9.9.9" ];
       upstream_dns = [
         # Default upstreams

hosts/router/firewall.nix

@@ -86,7 +86,7 @@ in
     content = ''
       ${nftIdentifiers}
       define ALLOWED_TCP_PORTS = { ssh, https }
-      define ALLOWED_UDP_PORTS = { bootps, dhcpv6-server, domain, https }
+      define ALLOWED_UDP_PORTS = { bootps, dhcpv6-server, domain }
       set port_forward_v6 {
           type inet_proto . ipv6_addr . inet_service
           elements = {

hosts/router/glance.nix

@@ -1,166 +0,0 @@
-{ config, lib, pkgs, ... }:
-let
-  vars = import ./vars.nix;
-  domain = vars.domain;
-in
-{
-  # Glance dashboard
-  services.glance.enable = true;
-  services.glance.settings.pages = [
-    {
-      name = "Home";
-      # hideDesktopNavigation = true; # Uncomment if needed
-      columns = [
-        {
-          size = "small";
-          widgets = [
-            {
-              type = "calendar";
-              firstDayOfWeek = "monday";
-            }
-            {
-              type = "rss";
-              limit = 10;
-              collapseAfter = 3;
-              cache = "12h";
-              feeds = [
-                { url = "https://rtk0c.pages.dev/index.xml"; }
-                { url = "https://www.yegor256.com/rss.xml"; }
-                { url = "https://selfh.st/rss/"; title = "selfh.st"; }
-                { url = "https://ciechanow.ski/atom.xml"; }
-                { url = "https://www.joshwcomeau.com/rss.xml"; title = "Josh Comeau"; }
-                { url = "https://samwho.dev/rss.xml"; }
-                { url = "https://ishadeed.com/feed.xml"; title = "Ahmad Shadeed"; }
-              ];
-            }
-            {
-              type = "twitch-channels";
-              channels = [
-                "theprimeagen"
-                "j_blow"
-                "piratesoftware"
-                "cohhcarnage"
-                "christitustech"
-                "EJ_SA"
-              ];
-            }
-          ];
-        }
-        {
-          size = "full";
-          widgets = [
-            {
-              type = "group";
-              widgets = [
-                { type = "hacker-news"; }
-                { type = "lobsters"; }
-              ];
-            }
-            {
-              type = "videos";
-              channels = [
-                "UCXuqSBlHAE6Xw-yeJA0Tunw" # Linus Tech Tips
-                "UCR-DXc1voovS8nhAvccRZhg" # Jeff Geerling
-                "UCsBjURrPoezykLs9EqgamOA" # Fireship
-                "UCBJycsmduvYEL83R_U4JriQ" # Marques Brownlee
-                "UCHnyfMqiRRG1u-2MsSQLbXA" # Veritasium
-              ];
-            }
-            {
-              type = "group";
-              widgets = [
-                {
-                  type = "reddit";
-                  subreddit = "technology";
-                  showThumbnails = true;
-                }
-                {
-                  type = "reddit";
-                  subreddit = "selfhosted";
-                  showThumbnails = true;
-                }
-              ];
-            }
-          ];
-        }
-        {
-          size = "small";
-          widgets = [
-            {
-              type = "weather";
-              location = "San Jose, California, United States";
-              units = "metric";
-              hourFormat = "12h";
-              # hideLocation = true; # Uncomment if needed
-            }
-            {
-              type = "markets";
-              markets = [
-                { symbol = "SPY"; name = "S&P 500"; }
-                { symbol = "BTC-USD"; name = "Bitcoin"; }
-                { symbol = "NVDA"; name = "NVIDIA"; }
-                { symbol = "AAPL"; name = "Apple"; }
-                { symbol = "MSFT"; name = "Microsoft"; }
-              ];
-            }
-            {
-              type = "releases";
-              cache = "1d";
-              # token = "..."; # Uncomment and set if needed
-              repositories = [
-                "glanceapp/glance"
-                "go-gitea/gitea"
-                "immich-app/immich"
-                "syncthing/syncthing"
-              ];
-            }
-          ];
-        }
-      ];
-    }
-    {
-      name = "Infrastructure";
-      columns = [
-        {
-          size = "small";
-          widgets = [
-            {
-              type = "server-stats";
-              servers = [
-                {
-                  type = "local";
-                  name = "Router";
-                  mountpoints."/nix/store".hide = true;
-                }
-              ];
-            }
-          ];
-        }
-        {
-          size = "full";
-          widgets = [
-            {
-              type = "iframe";
-              title = "Grafana";
-              title-url = "/grafana/";
-              source = "/grafana/d-solo/rYdddlPWk/node-exporter-full?orgId=1&from=1747211119196&to=1747297519196&timezone=browser&var-datasource=PBFA97CFB590B2093&var-job=node&var-node=localhost:9100&var-diskdevices=%5Ba-z%5D%2B%7Cnvme%5B0-9%5D%2Bn%5B0-9%5D%2B%7Cmmcblk%5B0-9%5D%2B&refresh=1m&panelId=74&__feature.dashboardSceneSolo";
-              height = 400;
-            }
-          ];
-        }
-        {
-          size = "small";
-          widgets = [
-            {
-              type = "dns-stats";
-              service = "adguard";
-              url = "http://localhost:${toString config.services.adguardhome.port}";
-              username = "";
-              password = "";
-            }
-          ];
-        }
-      ];
-    }
-  ];
-}

hosts/router/services.nix

@@ -4,7 +4,6 @@ let
   domain = vars.domain;
 in
 {
-
   # vnStat for tracking network interface stats
   services.vnstat.enable = true;
 
@@ -31,14 +30,10 @@ in
   # https://wiki.nixos.org/wiki/Grafana#Declarative_configuration
   services.grafana = {
     enable = true;
-    settings = {
+    settings.server = {
-      security.allow_embedding = true;
-      server = {
       http_port = 3001;
-        domain = "grouter.${domain}";
-        root_url = "https://%(domain)s/grafana/";
       serve_from_sub_path = true;
-      };
+      root_url = "%(protocol)s://%(domain)s:%(http_port)s/grafana/";
     };
     provision = {
       enable = true;
@@ -61,7 +56,6 @@ in
       hash = "sha256-saKJatiBZ4775IV2C5JLOmZ4BwHKFtRZan94aS5pO90=";
     };
     virtualHosts."grouter.${domain}".extraConfig = ''
-      encode
       tls {
           dns cloudflare {env.CF_API_KEY}
           resolvers 1.1.1.1
@@ -77,9 +71,6 @@ in
               Bob $2a$14$HsWmmzQTN68K3vwiRAfiUuqIjKoXEXaj9TOLUtG2mO1vFpdovmyBy
           }
       }
-      handle /* {
-          reverse_proxy localhost:${toString config.services.glance.settings.server.port}
-      }
     '';
   };
 }

renovate.json

@@ -2,11 +2,5 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
-  ],
+  ]
-  "lockFileMaintenance": {
-    "enabled": true
-  },
-  "nix": {
-    "enabled": true
-  }
 }