diff options
| author | Jakub Stachurski <jakub@wilkuu.nl> | 2026-08-10 13:57:46 +0200 |
|---|---|---|
| committer | Jakub Stachurski <jakub@wilkuu.nl> | 2026-08-10 13:57:46 +0200 |
| commit | fe8124f94a4f0e875d8d201a9ee8798ac3f91d2a (patch) | |
| tree | 0de1bd667843d07051e71e75763b4a5d8916dd47 /hosts/omega-relay | |
| parent | 4643ff69e9aa0ce8c1ae9e1a09456afa9227e5cd (diff) | |
nix fmt
Diffstat (limited to 'hosts/omega-relay')
| -rw-r--r-- | hosts/omega-relay/default.nix | 66 |
1 files changed, 38 insertions, 28 deletions
diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix index 2e528ae..62bbab6 100644 --- a/hosts/omega-relay/default.nix +++ b/hosts/omega-relay/default.nix @@ -215,41 +215,51 @@ }; networking.hostName = "omega-relay"; - users.groups.unbound = {}; + users.groups.unbound = { }; services.unbound = { - enable = true; + enable = true; group = "unbound"; - localControlSocketPath = "/run/unbound/unbound.ctl"; + localControlSocketPath = "/run/unbound/unbound.ctl"; settings = { - server = let lan_domains = ["home" "home.arpa" "wilkuu" "lan"]; in { - qname-minimisation = true; - private-domain = lan_domains; - domain-insecure = lan_domains; - unblock-lan-zones = true; - insecure-lan-zones = true; - }; + server = + let + lan_domains = [ + "home" + "home.arpa" + "wilkuu" + "lan" + ]; + in + { + qname-minimisation = true; + private-domain = lan_domains; + domain-insecure = lan_domains; + unblock-lan-zones = true; + insecure-lan-zones = true; + }; forward-zone = [ - # { - # name = "home.wilkuu.xyz."; + # { + # name = "home.wilkuu.xyz."; # TODO: Maybe move the responsibility of home zones to omega-relay - # forward-addr = [ - # "192.168.88.1" - # ]; - # } - { - name = "."; - forward-tls-upstream = true; - forward-addr = [ - "1.1.1.1@853#cloudflare-dns.com" - "1.0.0.1@853#cloudflare-dns.com" - "8.8.8.8@853#dns.google" - "8.8.4.4@853#dns.google" - ]; - }]; + # forward-addr = [ + # "192.168.88.1" + # ]; + # } + { + name = "."; + forward-tls-upstream = true; + forward-addr = [ + "1.1.1.1@853#cloudflare-dns.com" + "1.0.0.1@853#cloudflare-dns.com" + "8.8.8.8@853#dns.google" + "8.8.4.4@853#dns.google" + ]; + } + ]; - }; - }; + }; + }; services.prometheus.exporters.unbound = { enable = true; |