Alex
a0db30ca26
- get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address
14 lines
420 B
Nix
14 lines
420 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
deuxfleurs.site_name = "corrin";
|
|
deuxfleurs.lan_default_gateway = "192.168.1.1";
|
|
deuxfleurs.ipv6_default_gateway = "fe80::7ec1:77ff:fe3e:bb90";
|
|
deuxfleurs.lan_ip_prefix_length = 24;
|
|
deuxfleurs.ipv6_prefix_length = 64;
|
|
deuxfleurs.cname_target = "corrin.site.staging.deuxfleurs.org.";
|
|
deuxfleurs.public_ipv4 = "82.120.233.78";
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
}
|