aboutsummaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-08-14 19:26:50 +0200
committerIsabella Bastaja <isabella@sorre.xyz>2026-08-14 19:27:15 +0200
commit41f5906d52bf6896df6acf7b9aed54269c9f60e1 (patch)
tree4b10ab6fa960b9166b5eeaee7435abf909d4765b /hosts
parentfb6864e23e25e03aa762b3f14e6608abbcab8a36 (diff)
sagittarius: remove dns (handled by headscale now)
Diffstat (limited to 'hosts')
-rw-r--r--hosts/sagittarius/web/default.nix1
-rw-r--r--hosts/sagittarius/web/dns.nix36
2 files changed, 0 insertions, 37 deletions
diff --git a/hosts/sagittarius/web/default.nix b/hosts/sagittarius/web/default.nix
index da1d41d..2424eaf 100644
--- a/hosts/sagittarius/web/default.nix
+++ b/hosts/sagittarius/web/default.nix
@@ -7,6 +7,5 @@
./static.nix
./navidrome.nix
./vaultwarden.nix
- ./dns.nix
];
}
diff --git a/hosts/sagittarius/web/dns.nix b/hosts/sagittarius/web/dns.nix
deleted file mode 100644
index 94130d5..0000000
--- a/hosts/sagittarius/web/dns.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-{ flakeRoot, ... }:
-{
- services.resolved.enable = false;
- services.unbound = {
- enable = true;
- settings = {
- server = {
- interface = [
- "127.0.0.1"
- "2301:db8:acad:a::1"
- ];
- do-not-query-localhost = false;
- access-control = [
- # allow wireguard
- "2301:db8:acad:a::/64 allow"
-
- # allow localhost
- "127.0.0.0/8 allow"
-
- # block all else
- "0.0.0.0/0 refuse"
- "::0/0 refuse"
- ];
- };
-
- auth-zone = [
- {
- name = "sorre.internal.";
- zonefile = "${flakeRoot + /etc/dns/sorre.internal.zone}";
- fallback-enabled = false;
- for-downstream = true;
- }
- ];
- };
- };
-}