cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

modules/dgn-dns: init

Browse source 
Also deploy a DNS server on compute01
This commit is contained in:
Tom Hubrecht 2023-07-21 00:37:05 +02:00
parent fef1e90386
commit c2616ce4f5
12 changed files with 252 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

33
modules/dgn-dns/default.nix Normal file
View file

@ -0,0 +1,33 @@
args@{ config, lib, meta, name, sources, ... }:
let
inherit (lib)
mkEnableOption
mkIf;
dns = import sources."dns.nix";
cfg = config.dgn-dns;
in
{
options.dgn-dns = {
enable = mkEnableOption "an authoritative dns service on this server.";
};
config = mkIf cfg.enable {
services.nsd = {
enable = true;
interfaces = meta.network.${name}.addresses.public;
zones = import ./zones (args // { inherit dns; });
};
networking.firewall = {
allowedTCPPorts = [ 53 ];
allowedUDPPorts = [ 53 ];
};
};
}