Alex
a0db30ca26
- get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address
13 lines
375 B
Nix
13 lines
375 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
deuxfleurs.site_name = "bespin";
|
|
deuxfleurs.lan_default_gateway = "192.168.5.254";
|
|
deuxfleurs.ipv6_default_gateway = "2a02:a03f:6510:5102::1";
|
|
deuxfleurs.lan_ip_prefix_length = 24;
|
|
deuxfleurs.ipv6_prefix_length = 64;
|
|
deuxfleurs.cname_target = "bespin.site.staging.deuxfleurs.org.";
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
}
|