fix(homelab): use iptables rules to prevent wan access

nix/homelab/helm/helmfile.yaml

@@ -11,6 +11,8 @@ repositories:
     url: https://charts.longhorn.io
   - name: home-assistant
     url: https://pajikos.github.io/home-assistant-helm-chart
+  - name: pihole
+    url: https://mojo2600.github.io/pihole-kubernetes/
 
 releases:
   # Load Balancer
@@ -47,6 +49,13 @@ releases:
       - persistence:
           defaultClassReplicaCount: 1
 
+  - name: pihole
+    namespace: pihole-system
+    chart: pihole/pihole
+    version: 2.35.0
+    values:
+      - values/pihole.yaml
+
   # Minecraft
   - name: minecraft-router
     namespace: minecraft

nix/homelab/helm/values/pihole.yaml

@@ -0,0 +1,17 @@
+persistentVolumeClaim:
+  enabled: true
+
+DNS1:
+  1.1.1.1
+
+serviceWeb:
+  https:
+    enabled: false
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 500m
+    memory: 512Mi