nameservers/public: Init module

This commit is contained in:
SebastianStork 2026-03-01 22:57:01 +01:00
parent 84f6206a39
commit bb0b81be73
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q

View file

@ -0,0 +1,88 @@
{
config,
inputs,
lib,
allHosts,
...
}:
let
cfg = config.custom.services.nameservers.public;
netCfg = config.custom.networking;
zoneData =
zone:
let
mkSubdomain =
{ name, address }:
{
inherit name;
value.A = [ address ];
};
serviceRecords =
allHosts
|> lib.attrValues
|> lib.concatMap (
host:
host.config.custom.services.caddy.virtualHosts
|> lib.attrValues
|> lib.map (vHost: vHost.domain)
|> lib.filter (domain: domain |> lib.hasSuffix "${zone}")
|> lib.map (domain: domain |> lib.removeSuffix ".${zone}" |> lib.removeSuffix "${zone}") # In case the domain is the root domain
|> lib.map (name: {
inherit name;
inherit (host.config.custom.networking.underlay) address;
})
);
nsRecords =
allHosts
|> lib.attrValues
|> lib.filter (host: host.config.custom.services.nameservers.public.enable)
|> lib.map (host: {
name = host.config.custom.networking.hostName;
inherit (host.config.custom.networking.underlay) address;
});
in
inputs.dns.lib.toString zone {
SOA = {
nameServer = "${netCfg.hostName}.${zone}.";
adminEmail = "hostmaster@sstork.dev";
serial = 1;
};
NS = nsRecords |> lib.map ({ name, ... }: "${name}.${zone}.");
A = serviceRecords |> lib.filter ({ name, ... }: name == "") |> lib.map (record: record.address);
subdomains =
serviceRecords
|> lib.filter ({ name, ... }: name != "")
|> (subRecords: nsRecords ++ subRecords)
|> lib.map mkSubdomain
|> lib.listToAttrs;
};
in
{
options.custom.services.nameservers.public = {
enable = lib.mkEnableOption "";
zones = lib.mkOption {
type = lib.types.nonEmptyListOf lib.types.nonEmptyStr;
default = [ ];
};
};
config = lib.mkIf cfg.enable {
services.nsd = {
enable = true;
interfaces = [ netCfg.underlay.interface ];
zones =
cfg.zones
|> lib.map (zone: {
name = zone;
value.data = zoneData zone;
})
|> lib.listToAttrs;
};
};
}