Alex
a0db30ca26
- get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address
16 lines
477 B
Nix
16 lines
477 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
deuxfleurs.site_name = "jupiter";
|
|
deuxfleurs.lan_default_gateway = "192.168.1.1";
|
|
deuxfleurs.ipv6_default_gateway = "fe80::9038:202a:73a0:e73b";
|
|
deuxfleurs.lan_ip_prefix_length = 24;
|
|
deuxfleurs.ipv6_prefix_length = 64;
|
|
deuxfleurs.cname_target = "jupiter.site.staging.deuxfleurs.org.";
|
|
|
|
# no public ipv4 is used for the staging cluster on Jupiter
|
|
# deuxfleurs.public_ipv4 = "???";
|
|
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
|
}
|