cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

unbound changes

Browse Source
This commit is contained in:
cnst
2025-08-12 18:42:47 +02:00
parent 6608a09bbb
commit ff940c97e8
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
modules/server/unbound/default.nix
View File

@@ -14,7 +14,7 @@ in {
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
services = { services = {
resolved.enable = lib.mkForce false; # resolved.enable = lib.mkForce false;
unbound = { unbound = {
enable = true; enable = true;
enableRootTrustAnchor = true; enableRootTrustAnchor = true;
@@ -23,6 +23,12 @@ in {
package = pkgs.unbound-full; package = pkgs.unbound-full;
settings = { settings = {
server = { server = {
access-control = [
"127.0.0.0/8 allow"
"10.88.0.0/24 allow"
"::1 allow"
"192.168.88.0/24 allow"
];
aggressive-nsec = true; aggressive-nsec = true;
cache-max-ttl = 86400; cache-max-ttl = 86400;
cache-min-ttl = 300; cache-min-ttl = 300;
@@ -44,6 +50,7 @@ in {
infra-cache-slabs = 8; infra-cache-slabs = 8;
interface = [ interface = [
"127.0.0.1@5335" "127.0.0.1@5335"
"192.168.88.14@5335"
"::@5335" "::@5335"
]; ];
key-cache-slabs = 8; key-cache-slabs = 8;
@@ -83,8 +90,6 @@ in {
"255.255.255.255/32" "255.255.255.255/32"
"2001:db8::/32" "2001:db8::/32"
]; ];
private-domain = ["local"];
domain-insecure = ["local"];
}; };
}; };
}; };