summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGregor Kleen <pngwjpgh@users.noreply.github.com>2016-11-10 21:29:38 +0100
committerGregor Kleen <pngwjpgh@users.noreply.github.com>2016-11-10 21:29:38 +0100
commitbf2c03bda8e840ea0aaa0563630ac6acb777d468 (patch)
treeb7396d757bea06bfb6b460dc0b4d9f81d390d6eb
parent64f952ec110b6f0ec5d460cb0ddc2710c4f6c25c (diff)
downloadnixos-bf2c03bda8e840ea0aaa0563630ac6acb777d468.tar
nixos-bf2c03bda8e840ea0aaa0563630ac6acb777d468.tar.gz
nixos-bf2c03bda8e840ea0aaa0563630ac6acb777d468.tar.bz2
nixos-bf2c03bda8e840ea0aaa0563630ac6acb777d468.tar.xz
nixos-bf2c03bda8e840ea0aaa0563630ac6acb777d468.zip
bisect networks, unbound locally, nsd for remote
-rw-r--r--ymir.nix10
1 files changed, 7 insertions, 3 deletions
diff --git a/ymir.nix b/ymir.nix
index e3fb7e99..1ee1201c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -157,6 +157,10 @@ in rec {
157 ipv6Address = "2a03:4000:6:d004::"; 157 ipv6Address = "2a03:4000:6:d004::";
158 ipv6PrefixLength = 64; 158 ipv6PrefixLength = 64;
159 }; 159 };
160 dnsExtensionMechanism = true;
161 nameservers = [ "localhost" "10.141.1.1" "8.8.8.8" "8.8.4.4" ];
162 domain = [ "niflheim.yggdrasil" ];
163 search = [ "niflheim.yggdrasil" "yggdrasil" "asgard.yggdrasil" "yourvserver.net" ];
160 }; 164 };
161 165
162 users.extraUsers.root = let 166 users.extraUsers.root = let
@@ -247,7 +251,7 @@ in rec {
247 inherit (pkgs) stdenv nettools openresolv; 251 inherit (pkgs) stdenv nettools openresolv;
248 name = "ymir"; 252 name = "ymir";
249 connect = false; 253 connect = false;
250 useDNS = true; 254 useDNS = false;
251 ipConf = { 255 ipConf = {
252 ip4 = [ { address = "10.141.5.1"; prefixLength = 16; } ]; 256 ip4 = [ { address = "10.141.5.1"; prefixLength = 16; } ];
253 }; 257 };
@@ -646,7 +650,7 @@ in rec {
646 services.nsd = { 650 services.nsd = {
647 enable = true; 651 enable = true;
648 verbosity = 3; 652 verbosity = 3;
649 interfaces = [ "127.0.0.1" "::1" "10.141.5.1" "10.142.0.3" "188.68.51.254" "2a03:4000:6:d004::" ]; 653 interfaces = [ "10.142.0.3" "188.68.51.254" "2a03:4000:6:d004::" ];
650 ipTransparent = true; 654 ipTransparent = true;
651 zones = { 655 zones = {
652 "inwx" = { 656 "inwx" = {
@@ -662,7 +666,7 @@ in rec {
662 services.unbound = { 666 services.unbound = {
663 enable = true; 667 enable = true;
664 allowedAccess = ["127.0.0.0/8" "::ffff:127.0.0.0/104" "::1/128" "10.141.0.0/16"]; 668 allowedAccess = ["127.0.0.0/8" "::ffff:127.0.0.0/104" "::1/128" "10.141.0.0/16"];
665 interfaces = ["127.0.0.1@5353" "::1@5353" "10.141.5.1@5353"]; 669 interfaces = ["127.0.0.1" "::1" "10.141.5.1"];
666 extraConfig = '' 670 extraConfig = ''
667 verbosity: 1 671 verbosity: 1
668 672