aboutsummaryrefslogtreecommitdiff
path: root/hosts/sagittarius/web/dns.nix
blob: 5550c75d0abbb5519eea578824b6593d58259889 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
{ flakeRoot, ... }:
let
  nsdPort = 5340;
in
{
  services.nsd = {
    enable = true;
    interfaces = [ "127.0.0.1" ];
    port = nsdPort;
    zones."sorre.internal.".data = builtins.readFile (flakeRoot + /etc/dns/sorre.internal.zone);
  };

  services.unbound = {
    enable = true;
    settings = {
      server.interface = "2301:db8:acad:a::1";

      stub-zone = [
        {
          name = "sorre.internal";
          stub-addr = "127.0.0.1@${toString nsdPort}";
          stub-prime = false; # no DNSSEC
          stub-first = false; # don't cache NXDOMAIN (to make adding new domains easier)
        }
      ];
    };
  };
}