From 61288d4675fa936a7ed5642518b55d58f084e59c Mon Sep 17 00:00:00 2001 From: Katherina Walshe-Grey Date: Wed, 4 Dec 2024 18:57:45 +0000 Subject: [PATCH] yevaud: move dns experiment to separate file --- hosts/yevaud/default.nix | 32 ++-------------------- hosts/yevaud/experiments/birdsong-dns.nix | 33 +++++++++++++++++++++++ 2 files changed, 35 insertions(+), 30 deletions(-) create mode 100644 hosts/yevaud/experiments/birdsong-dns.nix diff --git a/hosts/yevaud/default.nix b/hosts/yevaud/default.nix index 2a8fdae..f202d28 100644 --- a/hosts/yevaud/default.nix +++ b/hosts/yevaud/default.nix @@ -4,6 +4,8 @@ imports = [ ./hardware-configuration.nix ./networking.nix + + ./experiments/birdsong-dns.nix ]; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; @@ -14,36 +16,6 @@ users.users.qenya.extraGroups = [ "wheel" ]; qenya.base-server.enable = true; - services.bind = { - # enable = true; - cacheNetworks = [ "10.127.0.0/16" "fd70:81ca:0f8f::/48" ]; - forwarders = [ ]; - listenOn = [ config.birdsong.hosts.yevaud.ipv4 ]; - listenOnIpv6 = [ config.birdsong.hosts.yevaud.ipv6 ]; - zones = { - "birdsong.internal" = { - master = true; - # TODO: pick better email address for SOA record - file = pkgs.writeText "birdsong.internal.zone" '' - $TTL 60 - $ORIGIN birdsong.internal. - - birdsong.internal. IN SOA ns.birdsong.internal. accounts.katherina.rocks. ( 2024080401 7200 3600 1209600 3600 ) - birdsong.internal. IN NS ns.birdsong.internal. - - yevaud.c.birdsong.internal. IN A 10.127.1.1 - yevaud.c.birdsong.internal. IN AAAA fd70:81ca:0f8f:1::1 - - ns.birdsong.internal. IN A 10.127.1.1 - ns.birdsong.internal. IN AAAA fd70:81ca:0f8f:1::1 - ''; - }; - }; - }; - networking.resolvconf.useLocalResolver = false; - networking.firewall.allowedTCPPorts = [ 53 ]; - networking.firewall.allowedUDPPorts = [ 53 ]; - randomcat.services.zfs.datasets = { "rpool/state" = { mountpoint = "none"; }; "rpool/state/forgejo" = { mountpoint = "/var/lib/forgejo"; }; diff --git a/hosts/yevaud/experiments/birdsong-dns.nix b/hosts/yevaud/experiments/birdsong-dns.nix new file mode 100644 index 0000000..036e499 --- /dev/null +++ b/hosts/yevaud/experiments/birdsong-dns.nix @@ -0,0 +1,33 @@ +{ config, lib, pkgs, ... }: + +{ + services.bind = { + # enable = true; + cacheNetworks = [ "10.127.0.0/16" "fd70:81ca:0f8f::/48" ]; + forwarders = [ ]; + listenOn = [ config.birdsong.hosts.yevaud.ipv4 ]; + listenOnIpv6 = [ config.birdsong.hosts.yevaud.ipv6 ]; + zones = { + "birdsong.internal" = { + master = true; + # TODO: pick better email address for SOA record + file = pkgs.writeText "birdsong.internal.zone" '' + $TTL 60 + $ORIGIN birdsong.internal. + + birdsong.internal. IN SOA ns.birdsong.internal. accounts.katherina.rocks. ( 2024080401 7200 3600 1209600 3600 ) + birdsong.internal. IN NS ns.birdsong.internal. + + yevaud.c.birdsong.internal. IN A 10.127.1.1 + yevaud.c.birdsong.internal. IN AAAA fd70:81ca:0f8f:1::1 + + ns.birdsong.internal. IN A 10.127.1.1 + ns.birdsong.internal. IN AAAA fd70:81ca:0f8f:1::1 + ''; + }; + }; + }; + networking.resolvconf.useLocalResolver = false; + networking.firewall.allowedTCPPorts = [ 53 ]; + networking.firewall.allowedUDPPorts = [ 53 ]; +}