50 lines
No EOL
1.6 KiB
Nix
50 lines
No EOL
1.6 KiB
Nix
{ config, lib, ... }:
|
|
|
|
let
|
|
# Import nodes
|
|
nodes = import ./../../nodes.nix;
|
|
|
|
# Import mapping
|
|
mapping = import ./../../mapping.nix;
|
|
in
|
|
{
|
|
services.resolved.enable = false;
|
|
networking.resolvconf.enable = false;
|
|
|
|
networking.domain = "lf";
|
|
|
|
environment.etc."resolv.conf".text = ''
|
|
# Do not edit, will be overwritten by Nixos
|
|
domain ${config.networking.domain}
|
|
search ${config.networking.domain}
|
|
${lib.strings.concatStringsSep "\n" (map (ip: "nameserver ${ip}") config.services.dnsmasq.settings.listen-address)}
|
|
options edns0 trust-ad
|
|
'';
|
|
|
|
services.dnsmasq = {
|
|
enable = true;
|
|
settings = {
|
|
bind-interfaces = true;
|
|
listen-address = [
|
|
"::1"
|
|
"127.0.0.1"
|
|
];
|
|
local = [
|
|
"/${config.networking.domain}/"
|
|
];
|
|
server = [
|
|
"1.1.1.1"
|
|
"8.8.8.8"
|
|
"9.9.9.9"
|
|
] ++ map (hostName: "/lf/172.19.${toString nodes.${hostName}.zone}.${toString nodes.${hostName}.id}") mapping.dns.hosts
|
|
++ map (hostName: "/lf/fc00::${toString nodes.${hostName}.zone}:${toString nodes.${hostName}.id}") mapping.dns.hosts;
|
|
no-resolv = true;
|
|
# Resolvconf can auto-generated /etc/dnsmasq-{conf,resolv}.conf
|
|
# By default dnsmasq import them
|
|
# We've disable resolvconf, but just to be on the safe side
|
|
resolv-file = false;
|
|
conf-file = false;
|
|
log-queries = false;
|
|
};
|
|
};
|
|
} |