vidhar: ...

1 files changed, 47 insertions, 0 deletions

diff --git a/hosts/vidhar/dns.nix b/hosts/vidhar/dns.nix
new file mode 100644
index 00000000..49afc5fc
--- /dev/null
+++ b/hosts/vidhar/dns.nix
@@ -0,0 +1,47 @@
+{ config, lib, pkgs, ... }:
+{
+  config = {
+    services.unbound = {
+      enable = true;
+      resolveLocalQueries = false;
+      stateDir = "/var/lib/unbound";
+      localControlSocketPath = "/run/unbound/unbound.ctl";
+      settings = {
+        server = {
+          interface = ["127.0.0.1" "10.141.0.1" "::0"];
+          access-control = ["0.0.0.0/0 allow" "::/0 allow"];
+          root-hints = "${pkgs.dns-root-data}/root.hints";
+
+          num-threads = 12;
+          so-reuseport = true;
+          msg-cache-slabs = 16;
+          rrset-cache-slabs = 16;
+          infra-cache-slabs = 16;
+          key-cache-slabs = 16;
+
+          rrset-cache-size = "100m";
+          msg-cache-size = "50m";
+          outgoing-range = 8192;
+          num-queries-per-thread = 4096;
+
+          so-rcvbuf = "4m";
+          so-sndbuf = "4m";
+
+          serve-expired = true;
+          serve-expired-ttl = 86400;
+          serve-expired-reply-ttl = 0;
+
+          prefetch = true;
+          prefetch-key = true;
+
+          minimal-responses = false;
+
+          extended-statistics = true;
+
+          rrset-roundrobin = true;
+          use-caps-for-id = true;
+        };
+      };
+    };
+  };
+}