fixed bind interfaces
This commit is contained in:
parent
1f5eda31b2
commit
f10c3e7a8c
@ -86,25 +86,14 @@
|
|||||||
|
|
||||||
# Core networking module (see ../../networking/core.nix)
|
# Core networking module (see ../../networking/core.nix)
|
||||||
networking = {
|
networking = {
|
||||||
firewall = {
|
firewall.enable = true;
|
||||||
enable = true;
|
|
||||||
udpPorts = {
|
|
||||||
dns.enable = true;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
networkmanager.enable = true;
|
networkmanager.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
# DNS module (see ../../networking/dns.nix)
|
# DNS module (see ../../networking/dns.nix)
|
||||||
dns = {
|
dns = {
|
||||||
technitium = {
|
technitium.enable = true;
|
||||||
enable = true;
|
|
||||||
};
|
};
|
||||||
bind.enable = false;
|
|
||||||
};
|
|
||||||
|
|
||||||
# Enable dconf
|
|
||||||
programs.dconf.enable = true;
|
|
||||||
|
|
||||||
# Add username to groups "wheel" and "video" - more may be added here later
|
# Add username to groups "wheel" and "video" - more may be added here later
|
||||||
users.users.${userName}.extraGroups = ["wheel" "podman" "network"];
|
users.users.${userName}.extraGroups = ["wheel" "podman" "network"];
|
||||||
|
@ -13,7 +13,13 @@ in {
|
|||||||
interfaces = lib.mkOption {
|
interfaces = lib.mkOption {
|
||||||
type = lib.types.listOf lib.types.str;
|
type = lib.types.listOf lib.types.str;
|
||||||
default = ["127.0.0.1"];
|
default = ["127.0.0.1"];
|
||||||
description = "Network interfaces BIND should listen on";
|
description = "Network interfaces BIND should listen on (IPv4)";
|
||||||
|
};
|
||||||
|
|
||||||
|
interfaces6 = lib.mkOption {
|
||||||
|
type = lib.types.listOf lib.types.str;
|
||||||
|
default = ["::1"];
|
||||||
|
description = "Network interfaces BIND should listen on (IPv6)";
|
||||||
};
|
};
|
||||||
|
|
||||||
zones = lib.mkOption {
|
zones = lib.mkOption {
|
||||||
@ -73,7 +79,8 @@ in {
|
|||||||
(lib.mkIf cfg.bind.enable {
|
(lib.mkIf cfg.bind.enable {
|
||||||
services.bind = {
|
services.bind = {
|
||||||
enable = true;
|
enable = true;
|
||||||
interfaces = cfg.bind.settings.interfaces;
|
listenOn = cfg.bind.settings.interfaces;
|
||||||
|
listenOnIpv6 = cfg.bind.settings.interfaces6;
|
||||||
zones =
|
zones =
|
||||||
map (zone: {
|
map (zone: {
|
||||||
name = zone.name;
|
name = zone.name;
|
||||||
|
Loading…
Reference in New Issue
Block a user