dns: fix firewall rule

hosts/dns/configuration.nix

@@ -5,27 +5,32 @@
     [ # Include the results of the hardware scan.
       ./hardware-configuration.nix
       ./dns.nix
-   ];
+    ];
 
-  # Use the systemd-boot EFI boot loader.
+ # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
-  networking.hostName = "dns-1"; # Define your hostname.
+  networking.hostName = "dns"; # Define your hostname.
 
-  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
-  # Per-interface useDHCP will be mandatory in the future, so this generated config
-  # replicates the default behaviour.
   networking.useDHCP = false;
-  #networking.interfaces.ens18.useDHCP = false;
-  #networking.interfaces.ens19.useDHCP = false;
+  networking.interfaces = {
+      ens18 = {
+        ipv4.addresses = [{
+          address = "10.42.10.8";
+          prefixLength = 24;
+        }];
+        ipv6.addresses = [{
+          address = "2a01:4f8:1c0c:8221::8";
+          prefixLength = 64;
+        }];
+      };
+  };
+  networking.defaultGateway6 = {
+    address = "2a01:4f8:1c0c:8221::1";
+    interface = "ens18";
+  };
 
-  # This value determines the NixOS release from which the default
-  # settings for stateful data, like file locations and database versions
-  # on your system were taken. It‘s perfectly fine and recommended to leave
-  # this value at the release version of the first install of this system.
-  # Before changing this value read the documentation for this option
-  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
   system.stateVersion = "21.11"; # Did you read the comment?
 
-}
+}

hosts/dns/coredns-unbound.patch

@@ -0,0 +1,13 @@
+Index: plugin.cfg
+IDEA additional info:
+Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
+<+>UTF-8
+===================================================================
+diff --git a/plugin.cfg b/plugin.cfg
+--- a/plugin.cfg	(revision ddee42c974d89d9beb4ebf7b82019624fbf0c456)
++++ b/plugin.cfg	(revision 04ba8accb25837d30a16445a1365489fe9509333)
+@@ -69,3 +69,4 @@
+ whoami:whoami
+ on:github.com/coredns/caddy/onevent
+ sign:sign
++unbound:github.com/coredns/unbound