From 6aadda851bfa7646d3984e03eeacfab0b8143913 Mon Sep 17 00:00:00 2001
From: Paul-Henri Froidmont <git.contact-57n2p@froidmont.org>
Date: Tue, 13 Sep 2022 22:26:02 +0200
Subject: [PATCH] Update AdGuard settings

---
 flake.lock | 12 ++++++------
 flake.nix  | 21 ++++++++++++++++++++-
 2 files changed, 26 insertions(+), 7 deletions(-)

diff --git a/flake.lock b/flake.lock
index 457e554..f3be932 100644
--- a/flake.lock
+++ b/flake.lock
@@ -6,11 +6,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1660574517,
-        "narHash": "sha256-Lp5D2pAPrM3iAc1eeR0iGwz5rM+SYOWzVxI3p17nlrU=",
+        "lastModified": 1662759269,
+        "narHash": "sha256-lt8bAfEZudCQb+MxoNKmenhMTXhu3RCCyLYxU9t5FFk=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "688e5c85b7537f308b82167c8eb4ecfb70a49861",
+        "rev": "9f7fe353b613d0e45d7a5cdbd1f13c96c15803dd",
         "type": "github"
       },
       "original": {
@@ -37,11 +37,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1660646295,
-        "narHash": "sha256-V4G+egGRc3elXPTr7QLJ7r7yrYed0areIKDiIAlMLC8=",
+        "lastModified": 1662996720,
+        "narHash": "sha256-XvLQ3SuXnDMJMpM1sv1ifPjBuRytiDYhB12H/BNTjgY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "762b003329510ea855b4097a37511eb19c7077f0",
+        "rev": "5f326e2a403e1cebaec378e72ceaf5725983376d",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 890d156..cbebfe8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -108,6 +108,8 @@
                 port = 80;
                 openFirewall = true;
 
+                mutableSettings = false;
+
                 settings = {
                   auth_attempts = 5;
                   block_auth_min = 15;
@@ -117,8 +119,25 @@
                     statistics_interval = 90;
                     querylog_enabled = true;
                     querylog_interval = 90;
-                    upstream_dns = [ "tls://doh.mullvad.net" ];
+                    upstream_dns = [
+                      "tls://doh.mullvad.net"
+                      "[/lan/]192.168.1.1"
+                      "[//]192.168.1.1"
+                    ];
+                    local_ptr_upstreams = [ "192.168.1.1" ];
+                    use_private_ptr_resolvers = true;
+                    resolve_clients = true;
                     bootstrap_dns = "9.9.9.10";
+                    rewrites = [
+                      {
+                        domain = "rpi3";
+                        answer = "192.168.1.2";
+                      }
+                      {
+                        domain = "rpi3.lan";
+                        answer = "192.168.1.2";
+                      }
+                    ];
                   };
                 };
               };