Allow DNS over TCP

hosts/carbon/configuration.nix

@@ -99,7 +99,12 @@
     enable = true;
     settings = {
       interfaces-config = {
-        interfaces = [ "enp1s0.204" ];
+        interfaces = [ "enp1s0.201" "enp1s0.204" ];
+      };
+      lease-database = {
+        name = "/var/lib/kea/dhcp4.leases";
+        persist = true;
+        type = "memfile";
       };
       option-def = [
         {
@@ -141,7 +146,33 @@
         }
       ];
       subnet4 = [
+        # Heimnetz
         {
+          id = 201;
+          subnet = "10.152.4.0/24";
+          pools = [
+            {
+              pool = "10.152.4.100 - 10.152.4.240";
+            }
+          ];
+          option-data = [
+            {
+              name = "routers";
+              data = "10.152.4.1";
+            }
+            {
+              name = "domain-name-servers";
+              data = "10.152.0.1";
+            }
+            {
+              name = "domain-name";
+              data = "net.clerie.de";
+            }
+          ];
+        }
+        # VoIP
+        {
+          id = 204;
           subnet = "10.152.33.0/24";
           pools = [
             {
@@ -224,6 +255,7 @@
   };
 
   networking.firewall.allowedUDPPorts = [ 53 60001 ];
+  networking.firewall.allowedTCPPorts = [ 53 ];
 
   networking.firewall.extraCommands = ''
     iptables -A FORWARD -i enp1s0.202 -o ppp-ntvdsl -j ACCEPT