diff options
| author | Jakub Stachurski <jakub@wilkuu.nl> | 2026-08-06 23:46:26 +0200 |
|---|---|---|
| committer | Jakub Stachurski <jakub@wilkuu.nl> | 2026-08-06 23:46:26 +0200 |
| commit | 4643ff69e9aa0ce8c1ae9e1a09456afa9227e5cd (patch) | |
| tree | df6e7b75a587cf277d741926abb6e7d2d276e55e /hosts | |
| parent | 0c28e554c74e649cca6e905d9be7d639cf53bf3b (diff) | |
nix update and livekit
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/apocalypse/default.nix | 8 | ||||
| -rw-r--r-- | hosts/omega-relay/default.nix | 42 |
2 files changed, 47 insertions, 3 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index 238ab09..261cb49 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -1,4 +1,4 @@ -{ lib, ... }: +{ lib, pkgs, ... }: { imports = [ ./hardware-configuration.nix @@ -22,9 +22,13 @@ }; wilkuu.mjmap = { - enable = true; + enable = false; # users = ["wilkuu"]; }; + environment.systemPackages = with pkgs; [ + mjmap + freecad-wayland + ]; ## Addons for this system addons = { desktop.hyprland.enable = false; diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix index 79543c3..2e528ae 100644 --- a/hosts/omega-relay/default.nix +++ b/hosts/omega-relay/default.nix @@ -215,8 +215,48 @@ }; networking.hostName = "omega-relay"; - services.resolved = { + users.groups.unbound = {}; + services.unbound = { + enable = true; + group = "unbound"; + localControlSocketPath = "/run/unbound/unbound.ctl"; + settings = { + server = let lan_domains = ["home" "home.arpa" "wilkuu" "lan"]; in { + qname-minimisation = true; + private-domain = lan_domains; + domain-insecure = lan_domains; + unblock-lan-zones = true; + insecure-lan-zones = true; + }; + + forward-zone = [ + # { + # name = "home.wilkuu.xyz."; + # TODO: Maybe move the responsibility of home zones to omega-relay + # forward-addr = [ + # "192.168.88.1" + # ]; + # } + { + name = "."; + forward-tls-upstream = true; + forward-addr = [ + "1.1.1.1@853#cloudflare-dns.com" + "1.0.0.1@853#cloudflare-dns.com" + "8.8.8.8@853#dns.google" + "8.8.4.4@853#dns.google" + ]; + }]; + + }; + }; + services.prometheus.exporters.unbound = { enable = true; + + }; + + services.resolved = { + enable = lib.mkForce false; settings.Resolve.DNSOverTLS = "opportunistic"; }; |