darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions

Use a local caching rdns

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2022-01-15 15:03:51 +01:00
parent 97265da7c0
commit 71881a6903
Signed by: darkkirb
GPG key ID: 015E3768A70AFBC5
2 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
config/nixos-8gb-fsn1-1.nix
View file

@ -123,4 +123,9 @@
};
networking.wireguard.interfaces."wg0".ips = [ "fd0d:a262:1fa6:e621:b4e1:08ff:e658:6f49/64" ];
networking.nameservers = [
"fd0d:a262:1fa6:e621:b4e1:08ff:e658:6f49"
];
networking.resolvconf.enable = false;
networking.dhcpcd.extraConfig = "nohook resolv.conf";
}

12
config/services/named.nix
View file

@ -42,6 +42,18 @@ in
${toString listenEntries}
};
'';
extraOptions = ''
allow-recursion {
127.0.0.1;
::1;
fc00::/7;
};
recursion yes;
response-policy {
zone "rpz.int.chir.rs";
};
dnssec-validation yes;
'';
};
networking.firewall.allowedTCPPorts = [ 53 ];
networking.firewall.allowedUDPPorts = [ 53 ];