hosts/carbon: Move DNS server to seperate file

2024-07-14 00:23:58 +02:00
parent b860650ead
commit 4105528835
2 changed files with 24 additions and 18 deletions
--- a/hosts/carbon/dns.nix
+++ b/hosts/carbon/dns.nix
@@ -0,0 +1,23 @@
+{ ... }:
+
+{
+
+  networking.firewall.allowedUDPPorts = [ 53 ];
+  networking.firewall.allowedTCPPorts = [ 53 ];
+
+  services.unbound = {
+    enable = true;
+    resolveLocalQueries = false;
+    settings = {
+      server = {
+        interface = [ "fd00:152:152::1" "10.152.0.1" ];
+        access-control = [ "::/0 allow" "0.0.0.0/0 allow" ];
+        prefer-ip6 = true;
+        prefetch = true;
+        serve-expired = true;
+        serve-expired-ttl-reset = true;
+      };
+    };
+  };
+
+}