cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

services/unbound: init

Browse source
This commit is contained in:
LavaDesu 2022-02-24 13:07:46 +07:00
parent 5bd03881e0
commit 40f3f9b11f
Signed by: cilly
GPG key ID: 6500251E087653C9
5 changed files with 47 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/default.nix
View file

@ -19,6 +19,7 @@ in {
./services/postgres.nix
./services/synapse.nix
./services/tmptsync.nix
./services/unbound.nix
];
system = mkAttrsFromPaths [
./system/audio.nix

27
modules/services/unbound.nix Normal file
View file

@ -0,0 +1,27 @@
{ inputs, ... }: {
networking.firewall.interfaces.wlan0 = {
allowedUDPPorts = [ 53 ];
allowedTCPPorts = [ 53 ];
};
services.unbound = {
enable = true;
stateDir = "/persist/unbound";
settings = {
forward-zone = [{
name = ".";
forward-tls-upstream = true;
forward-addr = [
"1.1.1.1@853#cloudflare-dns.com"
"1.0.0.1@853#cloudflare-dns.com"
];
}];
server = {
interface = [ "0.0.0.0" ];
access-control = [ "192.168.100.0/24 allow" ];
};
include = "${inputs.hosts-blocklists}/unbound/unbound.blacklist.conf";
};
};
}