fix(docker): force global dns and update jfa

devices/nos/modules/docker/wg-easy/compose.nix

@@ -25,8 +25,6 @@ in {
         "net.ipv4.conf.all.src_valid_mark=1"
       ];
 
-      dns = ["1.0.0.1"];
-
       environment = {
         WG_HOST = "166.62.179.208";
         WG_PORT = "51820";

devices/nos/modules/jellyfin/images/jfa-go.nix

@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage {
   imageName = "hrfee/jfa-go";
-  imageDigest = "sha256:e50d74379d91f9389afcd7db6bc4542ad2b1869f4af69c7f9fb5f9c02e7957da";
-  sha256 = "02v0p4yrp4gjm88mqvdasaslfl51r194m6fj08bmq16bm6zz1n9l";
+  imageDigest = "sha256:96b4744c1bbb25561e40121fc2132f96c08c569fdd9235d5de79e658a2682d88";
+  sha256 = "0payy2warh81rkry49n7kh07088jxkb8lgans8rlpq8vf69xmqlp";
   finalImageName = "hrfee/jfa-go";
   finalImageTag = "unstable";
 }

devices/nos/modules/jellyfin/jfa-go.nix

@@ -10,15 +10,20 @@ in {
     partOf = ["jellyfin.service"];
   };
 
-  khepri.compositions."jfa-go".services."jfa-go" = {
+  khepri.compositions."jfa-go" = {
+    networks.proxy_net = {external = true;};
+
+    services."jfa-go" = {
       image = import ./images/jfa-go.nix pkgs;
       restart = "always";
 
       ports = ["8056:8056"];
+      networks = ["proxy_net"];
 
       volumes = [
         "${jellyService.WorkingDirectory}/jfa-go:/data"
         "/etc/localtime:/etc/localtime:ro"
       ];
     };
+  };
 }

modules/docker/default.nix

@@ -28,7 +28,12 @@ in {
       docker = {
         enable = true;
         storageDriver = "btrfs";
+
+        package = pkgs.docker_27;
+
+        daemon.settings.dns = ["8.8.8.8" "1.1.1.1"];
       };
+
       # khepri uses oci-containers under the hood and it must be set to docker to work
       oci-containers.backend = "docker";
     };