foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: update Bind server config

Browse Source
This commit is contained in:
Gabriel Arazas 2023-06-29 09:44:55 +08:00
parent c9440205cf
commit a8aef35c5c
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
1 changed files with 16 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
hosts/plover/modules/services/bind.nix
View File

@ -108,13 +108,17 @@ in
include "${config.sops.secrets."plover/dns/${domain}/rfc2136-key".path}";
acl trusted { ${lib.concatStringsSep "; " internalsACL}; localhost; };
view external {
match-clients { any; };
view internal {
match-clients { trusted; };
forwarders { };
empty-zones-enable yes;
allow-query { any; };
allow-recursion { none; };
allow-recursion { any; };
forwarders { 127.0.0.53 port 53; };
zone "${fqdn}" {
type primary;
file "${zoneFile fqdn}";
};
zone "${domain}" {
type primary;
@ -127,18 +131,16 @@ in
};
};
view internal {
match-clients { trusted; };
allow-recursion { any; };
forwarders { 127.0.0.53 port 53; };
view external {
match-clients { any; };
zone "${fqdn}" {
type primary;
file "${zoneFile fqdn}";
};
forwarders { };
empty-zones-enable yes;
allow-query { any; };
allow-recursion { none; };
zone "${domain}" {
in-view external;
in-view internal;
};
};
'';