summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2018-08-06 14:35:58 +0200
committerGregor Kleen <gkleen@yggdrasil.li>2018-08-06 14:35:58 +0200
commit2994652970e30805a9ebcc1eab62b5bc04901123 (patch)
tree7063313fdbd41f564786be9e5e59ed082e4cc745
parentdb8dbd6e2b9df32910056b6e365b9892fa76b101 (diff)
downloadnixos-2994652970e30805a9ebcc1eab62b5bc04901123.tar
nixos-2994652970e30805a9ebcc1eab62b5bc04901123.tar.gz
nixos-2994652970e30805a9ebcc1eab62b5bc04901123.tar.bz2
nixos-2994652970e30805a9ebcc1eab62b5bc04901123.tar.xz
nixos-2994652970e30805a9ebcc1eab62b5bc04901123.zip
yggdrasil negative trust anchors
-rw-r--r--hel.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/hel.nix b/hel.nix
index d2f43848..d735a365 100644
--- a/hel.nix
+++ b/hel.nix
@@ -569,6 +569,13 @@
569 ''; 569 '';
570 }; 570 };
571 571
572 systemd.network.networks."yggdrasil" = {
573 name = "yggdrasil";
574 networkConfig = {
575 DNSSECNegativeTrustAnchors = [ "10.in-addr.arpa" "yggdrasil" "168.192.in-addr.arpa" "box" ];
576 };
577 };
578
572 system = { 579 system = {
573 stateVersion = "16.09"; 580 stateVersion = "16.09";
574 }; 581 };