diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-14 19:26:50 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-14 19:27:15 +0200 |
| commit | 41f5906d52bf6896df6acf7b9aed54269c9f60e1 (patch) | |
| tree | 4b10ab6fa960b9166b5eeaee7435abf909d4765b /hosts/sagittarius | |
| parent | fb6864e23e25e03aa762b3f14e6608abbcab8a36 (diff) | |
sagittarius: remove dns (handled by headscale now)
Diffstat (limited to 'hosts/sagittarius')
| -rw-r--r-- | hosts/sagittarius/web/default.nix | 1 | ||||
| -rw-r--r-- | hosts/sagittarius/web/dns.nix | 36 |
2 files changed, 0 insertions, 37 deletions
diff --git a/hosts/sagittarius/web/default.nix b/hosts/sagittarius/web/default.nix index da1d41d..2424eaf 100644 --- a/hosts/sagittarius/web/default.nix +++ b/hosts/sagittarius/web/default.nix @@ -7,6 +7,5 @@ ./static.nix ./navidrome.nix ./vaultwarden.nix - ./dns.nix ]; } diff --git a/hosts/sagittarius/web/dns.nix b/hosts/sagittarius/web/dns.nix deleted file mode 100644 index 94130d5..0000000 --- a/hosts/sagittarius/web/dns.nix +++ /dev/null @@ -1,36 +0,0 @@ -{ flakeRoot, ... }: -{ - services.resolved.enable = false; - services.unbound = { - enable = true; - settings = { - server = { - interface = [ - "127.0.0.1" - "2301:db8:acad:a::1" - ]; - do-not-query-localhost = false; - access-control = [ - # allow wireguard - "2301:db8:acad:a::/64 allow" - - # allow localhost - "127.0.0.0/8 allow" - - # block all else - "0.0.0.0/0 refuse" - "::0/0 refuse" - ]; - }; - - auth-zone = [ - { - name = "sorre.internal."; - zonefile = "${flakeRoot + /etc/dns/sorre.internal.zone}"; - fallback-enabled = false; - for-downstream = true; - } - ]; - }; - }; -} |
