1
0
mirror of https://github.com/ellmau/nixos.git synced 2025-12-19 09:29:36 +01:00
nixos/modules/server/unbound.nix
Stefan Ellmauthaler d2fce934d7
Undo open port
Wireguard network is already trusted
2022-08-01 10:48:30 +02:00

31 lines
664 B
Nix

{ config, lib, pkgs, ... }:
with lib; {
config =
let
cfg = config.elss.server.unbound;
in
mkIf cfg.enable {
services = {
resolved = {
enable = true;
dnssec = "true";
llmnr = "true";
fallbackDns = [ "127.0.0.1" "::1" ];
extraConfig = ''
DNS = 127.0.0.1 ::1
Domains = ~.
'';
};
unbound = {
enable = true;
settings.server.interface = [ "127.0.0.0" "::1" ];
};
};
networking = {
nameservers = [ "127.0.0.1" "::1"];
resolvconf.useLocalResolver = true;
};
};
}