From f10c3e7a8c8010570cb4802a58da614811926517 Mon Sep 17 00:00:00 2001
From: "Wyatt J. Miller" <wyatt@wyattjmiller.com>
Date: Sat, 4 Jan 2025 18:51:51 -0500
Subject: [PATCH] fixed bind interfaces

---
 modules/machine/valefor/configuration.nix | 15 ++-------------
 modules/networking/dns.nix                | 11 +++++++++--
 2 files changed, 11 insertions(+), 15 deletions(-)

diff --git a/modules/machine/valefor/configuration.nix b/modules/machine/valefor/configuration.nix
index b61ecab..bb96494 100644
--- a/modules/machine/valefor/configuration.nix
+++ b/modules/machine/valefor/configuration.nix
@@ -86,26 +86,15 @@
 
   # Core networking module (see ../../networking/core.nix)
   networking = {
-    firewall = {
-      enable = true;
-      udpPorts = {
-        dns.enable = true;
-      };
-    };
+    firewall.enable = true;
     networkmanager.enable = true;
   };
 
   # DNS module (see ../../networking/dns.nix)
   dns = {
-    technitium = {
-      enable = true;
-    };
-    bind.enable = false;
+    technitium.enable = true;
   };
 
-  # Enable dconf
-  programs.dconf.enable = true;
-
   # Add username to groups "wheel" and "video" - more may be added here later
   users.users.${userName}.extraGroups = ["wheel" "podman" "network"];
 
diff --git a/modules/networking/dns.nix b/modules/networking/dns.nix
index fc9b9a1..2d0ccb0 100644
--- a/modules/networking/dns.nix
+++ b/modules/networking/dns.nix
@@ -13,7 +13,13 @@ in {
         interfaces = lib.mkOption {
           type = lib.types.listOf lib.types.str;
           default = ["127.0.0.1"];
-          description = "Network interfaces BIND should listen on";
+          description = "Network interfaces BIND should listen on (IPv4)";
+        };
+
+        interfaces6 = lib.mkOption {
+          type = lib.types.listOf lib.types.str;
+          default = ["::1"];
+          description = "Network interfaces BIND should listen on (IPv6)";
         };
 
         zones = lib.mkOption {
@@ -73,7 +79,8 @@ in {
     (lib.mkIf cfg.bind.enable {
       services.bind = {
         enable = true;
-        interfaces = cfg.bind.settings.interfaces;
+        listenOn = cfg.bind.settings.interfaces;
+        listenOnIpv6 = cfg.bind.settings.interfaces6;
         zones =
           map (zone: {
             name = zone.name;