fixed bind interfaces

This commit is contained in:
Wyatt J. Miller 2025-01-04 18:51:51 -05:00
parent 1f5eda31b2
commit f10c3e7a8c
2 changed files with 11 additions and 15 deletions

View File

@ -86,26 +86,15 @@
# Core networking module (see ../../networking/core.nix) # Core networking module (see ../../networking/core.nix)
networking = { networking = {
firewall = { firewall.enable = true;
enable = true;
udpPorts = {
dns.enable = true;
};
};
networkmanager.enable = true; networkmanager.enable = true;
}; };
# DNS module (see ../../networking/dns.nix) # DNS module (see ../../networking/dns.nix)
dns = { dns = {
technitium = { technitium.enable = true;
enable = true;
};
bind.enable = false;
}; };
# Enable dconf
programs.dconf.enable = true;
# Add username to groups "wheel" and "video" - more may be added here later # Add username to groups "wheel" and "video" - more may be added here later
users.users.${userName}.extraGroups = ["wheel" "podman" "network"]; users.users.${userName}.extraGroups = ["wheel" "podman" "network"];

View File

@ -13,7 +13,13 @@ in {
interfaces = lib.mkOption { interfaces = lib.mkOption {
type = lib.types.listOf lib.types.str; type = lib.types.listOf lib.types.str;
default = ["127.0.0.1"]; default = ["127.0.0.1"];
description = "Network interfaces BIND should listen on"; description = "Network interfaces BIND should listen on (IPv4)";
};
interfaces6 = lib.mkOption {
type = lib.types.listOf lib.types.str;
default = ["::1"];
description = "Network interfaces BIND should listen on (IPv6)";
}; };
zones = lib.mkOption { zones = lib.mkOption {
@ -73,7 +79,8 @@ in {
(lib.mkIf cfg.bind.enable { (lib.mkIf cfg.bind.enable {
services.bind = { services.bind = {
enable = true; enable = true;
interfaces = cfg.bind.settings.interfaces; listenOn = cfg.bind.settings.interfaces;
listenOnIpv6 = cfg.bind.settings.interfaces6;
zones = zones =
map (zone: { map (zone: {
name = zone.name; name = zone.name;