rpqt/flocon
rpqt/flocon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move coredns to port 53 to allow access on android

Browse source
This commit is contained in:
Romain Paquet 2026-01-05 21:42:17 +01:00
parent 2063550f93
commit d3201fbca9
2 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
clan/network.nix
View file

@ -53,6 +53,7 @@
roles.default.tags.all = { }; roles.default.tags.all = { };
roles.server.machines.verbena = { roles.server.machines.verbena = {
settings.ip = "fd28:387a:90:c400::1"; settings.ip = "fd28:387a:90:c400::1";
settings.dnsPort = 53;
}; };
roles.server.machines.crocus = { roles.server.machines.crocus = {
settings.ip = "fd28:387a:90:c400:6db2:dfc3:c376:9956"; settings.ip = "fd28:387a:90:c400:6db2:dfc3:c376:9956";

8
clanServices/coredns/default.nix
View file

@ -118,11 +118,13 @@
'' ''
.:${dnsPort} { .:${dnsPort} {
bind wireguard
forward . 1.1.1.1 forward . 1.1.1.1
cache 30 cache 30
} }
${settings.tld}:${dnsPort} { ${settings.tld}:${dnsPort} {
bind wireguard
file ${zonefile} file ${zonefile}
} }
''; '';
@ -168,7 +170,7 @@
networking.nameservers = map ( networking.nameservers = map (
m: m:
let let
port = config.services.unbound.settings.port or 53; port = config.services.unbound.settings.server.port or 53;
in in
"127.0.0.1:${toString port}#${roles.server.machines.${m}.settings.tld}" "127.0.0.1:${toString port}#${roles.server.machines.${m}.settings.tld}"
) (lib.attrNames roles.server.machines); ) (lib.attrNames roles.server.machines);
@ -179,11 +181,11 @@
services.unbound = { services.unbound = {
enable = true; enable = true;
resolveLocalQueries = true; # resolveLocalQueries = true;
checkconf = true; checkconf = true;
settings = { settings = {
server = { server = {
# port = 5353; port = 5353;
verbosity = 2; verbosity = 2;
interface = [ "127.0.0.1" ]; interface = [ "127.0.0.1" ];
access-control = [ "127.0.0.0/8 allow" ]; access-control = [ "127.0.0.0/8 allow" ];