nixos-module/container/dnscache: allow flpk ipv6 and yggdrasil

This commit is contained in:
Astro 2022-12-23 16:27:11 +01:00
parent 5041624b6c
commit 31bcdb92d2
1 changed files with 3 additions and 1 deletions

View File

@ -49,8 +49,10 @@ lib.mkIf config.site.hosts.${hostName}.services.dnscache.enable {
]
[ # flpk
"${config.site.net.flpk.subnet4} allow"
"2a0f:5382:acab:1400::/56 allow"
]
(map (s: "${s} allow") (builtins.attrValues config.site.net.flpk.subnets6))
# yggdrasil
"${config.site.net.c3d2.subnets6.subnets6.yggdrasil} allow"
[ # default
"0.0.0.0/0 deny"
"::/0 deny"