aboutsummaryrefslogtreecommitdiff
path: root/hosts/sagittarius/network.nix
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-05-31 23:17:31 +0200
committerIsabella Bastaja <isabella@sorre.xyz>2026-06-04 17:08:37 +0200
commit721f7b6aecfb35694151c9c0e610f895171d202b (patch)
tree4e5d992e10cdf01f8bbc8637308ecd44f466b17c /hosts/sagittarius/network.nix
parentbef4a2595033a9e093214b252bb65bb8ca064211 (diff)
sagittarius: set up authoritative DNS server for sorre.internal
Diffstat (limited to 'hosts/sagittarius/network.nix')
-rw-r--r--hosts/sagittarius/network.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/sagittarius/network.nix b/hosts/sagittarius/network.nix
index 32362e6..1b41783 100644
--- a/hosts/sagittarius/network.nix
+++ b/hosts/sagittarius/network.nix
@@ -47,6 +47,8 @@
icmp type echo-request accept comment "allow ping"
icmpv6 type != { nd-redirect, 139 } accept comment "Accept all ICMPv6 messages except redirects and node information queries (type 139). See RFC 4890, section 4.4."
ip6 daddr fe80::/64 udp dport 546 accept comment "DHCPv6 client"
+
+ udp dport 53 meta mark 42 accept comment "allow DNS over wireguard"
}
'';
};