Add Spotify search to Librewolf, remove redundant Grub device option, first attempt at DNS adblocking

modules/system/devices/boot/grub/default.nix

@@ -3,6 +3,5 @@
   boot.loader.grub = {
     efiSupport = true;
     efiInstallAsRemovable = true;
-    device = "nodev";
   };
 }

modules/system/devices/networking/default.nix

@@ -8,10 +8,10 @@
     nftables.enable = true;
     firewall.allowPing = false;
     nameservers = [
-      "9.9.9.11#dns11.quad9.net"
-      "149.112.112.11#dns11.quad9.net"
       "2620:fe::11#dns11.quad9.net"
       "2620:fe::fe:11#dns11.quad9.net"
+      "9.9.9.11#dns11.quad9.net"
+      "149.112.112.11#dns11.quad9.net"
     ];
   };
 

modules/system/services/server/blocky/default.nix

@@ -0,0 +1,29 @@
+{ config, ... }:
+{
+  services.blocky = {
+    settings = {
+      upstreams.groups.default = [
+	"2606:4700:4700::1111"
+	"2606:4700:4700::1001"
+        "1.1.1.1"
+	"1.0.0.1"
+      ];
+
+      blocking = {
+        clientGroupsBlock.default = [
+          "pro"
+          "tif"
+        ];
+        denylists = {
+          "pro" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/pro.txt" ];
+          "tif" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/tif.txt" ];
+        };
+      };
+
+      caching = {
+        prefetching = true;
+        minTime = "1m";
+      };
+    };
+  };
+}

modules/system/services/server/default.nix

@@ -1,6 +1,7 @@
 { ... }:
 {
   imports = [
+    ./blocky
     ./cfdyndns
     ./forgejo
     ./icecast