SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-03-22 23:29:08 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

dns: Disable forwarding and resolve all requests yourself

Browse source
This commit is contained in:
SebastianStork 2026-02-03 23:37:52 +01:00
parent 56c7b22bf1
commit 3df7d8f5f0
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
1 changed files with 21 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

16
modules/system/services/dns.nix
View file

@ -16,12 +16,9 @@ in
unbound = { unbound = {
enable = true; enable = true;
settings = { settings.server = {
server = {
interface = [ netCfg.overlay.interface ]; interface = [ netCfg.overlay.interface ];
access-control = [ access-control = [ "${toString netCfg.overlay.networkCidr} allow" ];
"${toString netCfg.overlay.networkCidr} allow"
];
local-zone = "\"${netCfg.overlay.domain}.\" static"; local-zone = "\"${netCfg.overlay.domain}.\" static";
local-data = local-data =
@ -43,15 +40,6 @@ in
in in
nodeRecords ++ serviceRecords; nodeRecords ++ serviceRecords;
}; };
forward-zone = lib.singleton {
name = ".";
forward-addr = [
"1.1.1.1"
"8.8.8.8"
];
};
};
}; };
nebula.networks.mesh.firewall.inbound = lib.singleton { nebula.networks.mesh.firewall.inbound = lib.singleton {