modules/machine/valefor/configuration.nix

@@ -86,26 +86,15 @@
 
   # Core networking module (see ../../networking/core.nix)
   networking = {
-    firewall = {
-      enable = true;
-      udpPorts = {
-        dns.enable = true;
-      };
-    };
+    firewall.enable = true;
     networkmanager.enable = true;
   };
 
   # DNS module (see ../../networking/dns.nix)
   dns = {
-    technitium = {
-      enable = true;
-    };
-    bind.enable = false;
+    technitium.enable = true;
   };
 
-  # Enable dconf
-  programs.dconf.enable = true;
-
   # Add username to groups "wheel" and "video" - more may be added here later
   users.users.${userName}.extraGroups = ["wheel" "podman" "network"];
 

modules/networking/dns.nix

@@ -13,7 +13,13 @@ in {
         interfaces = lib.mkOption {
           type = lib.types.listOf lib.types.str;
           default = ["127.0.0.1"];
-          description = "Network interfaces BIND should listen on";
+          description = "Network interfaces BIND should listen on (IPv4)";
+        };
+
+        interfaces6 = lib.mkOption {
+          type = lib.types.listOf lib.types.str;
+          default = ["::1"];
+          description = "Network interfaces BIND should listen on (IPv6)";
         };
 
         zones = lib.mkOption {
@@ -73,7 +79,8 @@ in {
     (lib.mkIf cfg.bind.enable {
       services.bind = {
         enable = true;
-        interfaces = cfg.bind.settings.interfaces;
+        listenOn = cfg.bind.settings.interfaces;
+        listenOnIpv6 = cfg.bind.settings.interfaces6;
         zones =
           map (zone: {
             name = zone.name;