SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-03-22 16:39:07 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

nameservers/overlay: Refactor

Browse source
This commit is contained in:
SebastianStork 2026-03-01 22:57:43 +01:00
parent 7d0224d248
commit d696787ae7
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
1 changed files with 14 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/nixos/services/nameservers/overlay.nix
View file

@ -10,12 +10,13 @@ let
cfg = config.custom.services.nameservers.overlay;
netCfg = config.custom.networking;
zoneData = {
zoneData = inputs.dns.lib.toString netCfg.overlay.domain {
SOA = {
nameServer = "${netCfg.overlay.fqdn}.";
adminEmail = "hostmaster@sstork.dev";
serial = 1;
};
NS =
allHosts
|> lib.attrValues
@ -24,7 +25,7 @@ let
subdomains =
let
mkRecord =
mkSubdomain =
{ name, address }:
{
inherit name;
@ -33,13 +34,11 @@ let
nodeRecords =
netCfg.nodes
|> lib.map (
node:
mkRecord {
name = node.hostName;
inherit (node.overlay) address;
}
);
|> lib.map (node: {
name = node.hostName;
inherit (node.overlay) address;
});
serviceRecords =
allHosts
|> lib.attrValues
@ -49,16 +48,13 @@ let
|> lib.attrValues
|> lib.map (vHost: vHost.domain)
|> lib.filter (domain: self.lib.isPrivateDomain domain)
|> lib.map (
domain:
mkRecord {
name = domain |> lib.removeSuffix ".${netCfg.overlay.domain}";
inherit (host.config.custom.networking.overlay) address;
}
)
|> lib.map (domain: {
name = domain |> lib.removeSuffix ".${netCfg.overlay.domain}";
inherit (host.config.custom.networking.overlay) address;
})
);
in
(nodeRecords ++ serviceRecords) |> lib.listToAttrs;
(nodeRecords ++ serviceRecords) |> lib.map mkSubdomain |> lib.listToAttrs;
};
in
{
@ -69,7 +65,7 @@ in
nsd = {
enable = true;
interfaces = [ netCfg.overlay.interface ];
zones.${netCfg.overlay.domain}.data = zoneData |> inputs.dns.lib.toString netCfg.overlay.domain;
zones.${netCfg.overlay.domain}.data = zoneData;
};
nebula.networks.mesh.firewall.inbound = lib.singleton {