diff options
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/apocalypse/default.nix | 8 | ||||
| -rw-r--r-- | hosts/omega-relay/default.nix | 42 |
2 files changed, 47 insertions, 3 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index 238ab09..261cb49 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -1,4 +1,4 @@ -{ lib, ... }: +{ lib, pkgs, ... }: { imports = [ ./hardware-configuration.nix @@ -22,9 +22,13 @@ }; wilkuu.mjmap = { - enable = true; + enable = false; # users = ["wilkuu"]; }; + environment.systemPackages = with pkgs; [ + mjmap + freecad-wayland + ]; ## Addons for this system addons = { desktop.hyprland.enable = false; diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix index 79543c3..2e528ae 100644 --- a/hosts/omega-relay/default.nix +++ b/hosts/omega-relay/default.nix @@ -215,8 +215,48 @@ }; networking.hostName = "omega-relay"; - services.resolved = { + users.groups.unbound = {}; + services.unbound = { + enable = true; + group = "unbound"; + localControlSocketPath = "/run/unbound/unbound.ctl"; + settings = { + server = let lan_domains = ["home" "home.arpa" "wilkuu" "lan"]; in { + qname-minimisation = true; + private-domain = lan_domains; + domain-insecure = lan_domains; + unblock-lan-zones = true; + insecure-lan-zones = true; + }; + + forward-zone = [ + # { + # name = "home.wilkuu.xyz."; + # TODO: Maybe move the responsibility of home zones to omega-relay + # forward-addr = [ + # "192.168.88.1" + # ]; + # } + { + name = "."; + forward-tls-upstream = true; + forward-addr = [ + "1.1.1.1@853#cloudflare-dns.com" + "1.0.0.1@853#cloudflare-dns.com" + "8.8.8.8@853#dns.google" + "8.8.4.4@853#dns.google" + ]; + }]; + + }; + }; + services.prometheus.exporters.unbound = { enable = true; + + }; + + services.resolved = { + enable = lib.mkForce false; settings.Resolve.DNSOverTLS = "opportunistic"; }; |