summaryrefslogtreecommitdiff
path: root/hosts/vidhar/dns/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/vidhar/dns/default.nix')
-rw-r--r--hosts/vidhar/dns/default.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/hosts/vidhar/dns/default.nix b/hosts/vidhar/dns/default.nix
index 2e943afc..ade884e7 100644
--- a/hosts/vidhar/dns/default.nix
+++ b/hosts/vidhar/dns/default.nix
@@ -79,9 +79,14 @@ in {
79 }; 79 };
80 }; 80 };
81 81
82 systemd.services.knot = {
83 unitConfig.RequiresMountsFor = [ "/var/lib/knot" ];
84 serviceConfig.LoadCredential = map ({name, ...}: "${name}.yaml:${config.sops.secrets.${name}.path}") knotKeys;
85 };
86
82 services.knot = { 87 services.knot = {
83 enable = true; 88 enable = true;
84 keyFiles = map ({name, ...}: config.sops.secrets.${name}.path) knotKeys; 89 keyFiles = map ({name, ...}: "/run/credentials/knot.service/${name}.yaml") knotKeys;
85 extraConfig = '' 90 extraConfig = ''
86 server: 91 server:
87 listen: 127.0.0.1@5353 92 listen: 127.0.0.1@5353