5 commits

Author	SHA1	Message	Date
Alex	a9e9149739	Fix unbound; remove Nixos firewall (use only diplonat)	2023-04-21 11:29:15 +02:00
Alex	96566ae523	refactor configuration syntax	2023-03-24 15:26:39 +01:00
Alex	e2aea648cf	greatly simplify ipv4 and ipv6 configuration	2023-03-24 14:42:36 +01:00
Alex	a0db30ca26	Sanitize DNS configuration ... - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address	2023-03-24 12:58:44 +01:00
Alex	578075a925	Add origan node in staging cluster (+ refactor system.stateVersion)	2022-12-11 22:37:28 +01:00