From 41f5906d52bf6896df6acf7b9aed54269c9f60e1 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Fri, 14 Aug 2026 19:26:50 +0200
Subject: sagittarius: remove dns (handled by headscale now)

---
 hosts/sagittarius/web/default.nix |  1 -
 hosts/sagittarius/web/dns.nix     | 36 ------------------------------------
 2 files changed, 37 deletions(-)
 delete mode 100644 hosts/sagittarius/web/dns.nix

(limited to 'hosts/sagittarius')

diff --git a/hosts/sagittarius/web/default.nix b/hosts/sagittarius/web/default.nix
index da1d41d..2424eaf 100644
--- a/hosts/sagittarius/web/default.nix
+++ b/hosts/sagittarius/web/default.nix
@@ -7,6 +7,5 @@
     ./static.nix
     ./navidrome.nix
     ./vaultwarden.nix
-    ./dns.nix
   ];
 }
diff --git a/hosts/sagittarius/web/dns.nix b/hosts/sagittarius/web/dns.nix
deleted file mode 100644
index 94130d5..0000000
--- a/hosts/sagittarius/web/dns.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-{ flakeRoot, ... }:
-{
-  services.resolved.enable = false;
-  services.unbound = {
-    enable = true;
-    settings = {
-      server = {
-        interface = [
-          "127.0.0.1"
-          "2301:db8:acad:a::1"
-        ];
-        do-not-query-localhost = false;
-        access-control = [
-          # allow wireguard
-          "2301:db8:acad:a::/64 allow"
-
-          # allow localhost
-          "127.0.0.0/8 allow"
-
-          # block all else
-          "0.0.0.0/0 refuse"
-          "::0/0 refuse"
-        ];
-      };
-
-      auth-zone = [
-        {
-          name = "sorre.internal.";
-          zonefile = "${flakeRoot + /etc/dns/sorre.internal.zone}";
-          fallback-enabled = false;
-          for-downstream = true;
-        }
-      ];
-    };
-  };
-}
-- 
cgit v1.3.1