c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

dnscache: remove unreachable fd42 forward addrs from unbound, use ssl only for .

This commit is contained in:
Astro 2020-04-12 23:30:00 +02:00
parent f1662e06ef
commit a12ddfb3c3
1 changed files with 3 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
hosts/containers/dnscache/configuration.nix
View File

@ -86,11 +86,10 @@
"1.1.1.1@853" #cloudflare-dns.com
"2606:4700:4700::1111@853" #cloudflare-dns.com
"1.0.0.1@853" #cloudflare-dns.com
"2606:4700:4700::1001@853" #cloudflare-dns.com
"2606:4700:4700::1001@853\n forward-ssl-upstream: yes" #cloudflare-dns.com
];
extraConfig = ''
server:
ssl-upstream: yes
domain-insecure: "dn42"
domain-insecure: "20.172.in-addr.arpa"
domain-insecure: "21.172.in-addr.arpa"
@ -104,8 +103,8 @@
local-zone: "22.172.in-addr.arpa." nodefault
local-zone: "23.172.in-addr.arpa." nodefault
local-zone: "d.f.ip6.arpa." nodefault
local-zone: "ffdd"
local-zone: "10.200.in-addr.arpa"
local-zone: "ffdd." nodefault
local-zone: "10.200.in-addr.arpa." nodefault
remote-control:
control-enable: yes
@ -117,32 +116,26 @@
forward-zone:
name: "dn42"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone:
name: "20.172.in-addr.arpa"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone:
name: "21.172.in-addr.arpa"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone:
name: "22.172.in-addr.arpa"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone:
name: "23.172.in-addr.arpa"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone:
name: "d.f.ip6.arpa"
forward-addr: fd42:d42:d42:53::1
forward-addr: 172.23.0.53
forward-zone: