bind: sort
This commit is contained in:
parent
7819af404d
commit
a6f9000588
|
@ -39,6 +39,15 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# Privileged commands triggered by deploy-c3d2-dns
|
||||||
|
security.sudo.extraRules = [ {
|
||||||
|
users = [ "c3d2-dns" ];
|
||||||
|
commands = [ {
|
||||||
|
command = "${reloadCommand}/bin/reload-bind";
|
||||||
|
options = [ "NOPASSWD" ];
|
||||||
|
} ];
|
||||||
|
} ];
|
||||||
|
|
||||||
# DNS server
|
# DNS server
|
||||||
services.bind = {
|
services.bind = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
@ -52,10 +61,6 @@ in
|
||||||
};
|
};
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
systemd.services.bind.serviceConfig = {
|
|
||||||
Restart = "always";
|
|
||||||
RestartSec = "5s";
|
|
||||||
};
|
|
||||||
|
|
||||||
# BIND statistics in Grafana
|
# BIND statistics in Grafana
|
||||||
services.collectd.plugins.bind = ''
|
services.collectd.plugins.bind = ''
|
||||||
|
@ -69,6 +74,18 @@ in
|
||||||
MemoryStats true
|
MemoryStats true
|
||||||
'';
|
'';
|
||||||
|
|
||||||
|
system.stateVersion = "22.05";
|
||||||
|
|
||||||
|
systemd.services.bind.serviceConfig = {
|
||||||
|
Restart = "always";
|
||||||
|
RestartSec = "5s";
|
||||||
|
};
|
||||||
|
|
||||||
|
systemd.tmpfiles.rules = [
|
||||||
|
"d ${config.users.users.c3d2-dns.home} 0755 c3d2-dns ${config.users.users.c3d2-dns.group} - -"
|
||||||
|
"d /var/lib/bind/slave 0755 named nogroup - -"
|
||||||
|
];
|
||||||
|
|
||||||
# Build user
|
# Build user
|
||||||
users.groups.c3d2-dns = {};
|
users.groups.c3d2-dns = {};
|
||||||
users.users.c3d2-dns = {
|
users.users.c3d2-dns = {
|
||||||
|
@ -80,20 +97,4 @@ in
|
||||||
];
|
];
|
||||||
packages = [ reloadCommand ];
|
packages = [ reloadCommand ];
|
||||||
};
|
};
|
||||||
|
|
||||||
systemd.tmpfiles.rules = [
|
|
||||||
"d ${config.users.users.c3d2-dns.home} 0755 c3d2-dns ${config.users.users.c3d2-dns.group} - -"
|
|
||||||
"d /var/lib/bind/slave 0755 named nogroup - -"
|
|
||||||
];
|
|
||||||
|
|
||||||
# Privileged commands triggered by deploy-c3d2-dns
|
|
||||||
security.sudo.extraRules = [ {
|
|
||||||
users = [ "c3d2-dns" ];
|
|
||||||
commands = [ {
|
|
||||||
command = "${reloadCommand}/bin/reload-bind";
|
|
||||||
options = [ "NOPASSWD" ];
|
|
||||||
} ];
|
|
||||||
} ];
|
|
||||||
|
|
||||||
system.stateVersion = "22.05";
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue
Block a user