From 9320cbaaef6310b72d74beb1168acfee92456073 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sat, 29 May 2021 16:59:01 +0200
Subject: surtr@knot: listen & require mount

---
 hosts/surtr/dns/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 3fe76dbf..52a498c5 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -6,7 +6,9 @@
         fsType = "zfs";
       };
 
-    firewall = {
+    systemd.services.knot.unitConfig.RequiresMountsFor = [ "var-lib-knot.mount" ];
+
+    networking.firewall = {
       allowedTCPPorts = [
         53 # DNS
       ];
-- 
cgit v1.2.3