Explorar el Código

nixos-module/container/dnscache: extend domain-insecure, remove all local-zone

master
Astro hace 3 meses
padre
commit
911cd33a1c
Se han modificado 1 ficheros con 10 adiciones y 15 borrados
  1. 10
    15
      nix/nixos-module/container/dnscache.nix

+ 10
- 15
nix/nixos-module/container/dnscache.nix Ver fichero

@@ -39,23 +39,18 @@ lib.mkIf config.site.hosts.${hostName}.services.dnscache.enable {
39 39
         insecure-lan-zones: yes
40 40
 
41 41
         domain-insecure: "dn42"
42
-        domain-insecure: "20.172.in-addr.arpa"
43
-        domain-insecure: "21.172.in-addr.arpa"
44
-        domain-insecure: "22.172.in-addr.arpa"
45
-        domain-insecure: "99.22.172.in-addr.arpa"
46
-        domain-insecure: "23.172.in-addr.arpa"
42
+        domain-insecure: "10.in-addr.arpa"
43
+      ${lib.concatMapStrings (x:
44
+        "  domain-insecure: ${toString x}.172.in-addr.arpa\n"
45
+      ) [
46
+        16 17 18 19
47
+        20 21 22 23
48
+        24 25 26 27
49
+        28 29 30 31
50
+      ]}
51
+        domain-insecure: "168.192.in-addr.arpa"
47 52
         domain-insecure: "d.f.ip6.arpa"
48 53
         domain-insecure: "ffdd"
49
-        domain-insecure: "200.10.in-addr.arpa"
50
-        domain-insecure: "201.10.in-addr.arpa"
51
-        local-zone: "20.172.in-addr.arpa." nodefault
52
-        local-zone: "21.172.in-addr.arpa." nodefault
53
-        local-zone: "22.172.in-addr.arpa." nodefault
54
-        local-zone: "99.22.172.in-addr.arpa." nodefault
55
-        local-zone: "23.172.in-addr.arpa." nodefault
56
-        local-zone: "d.f.ip6.arpa." nodefault
57
-        local-zone: "200.10.in-addr.arpa." nodefault
58
-        local-zone: "201.10.in-addr.arpa." nodefault
59 54
 
60 55
       forward-zone:
61 56
         name: "."

Loading…
Cancelar
Guardar