From dc88ab4fdb077e67743e64aa8a5679c2af76461b Mon Sep 17 00:00:00 2001 From: LavaDesu Date: Thu, 24 Feb 2022 14:08:51 +0700 Subject: [PATCH] services/unbound: fix local access-control and state path --- modules/services/unbound.nix | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/modules/services/unbound.nix b/modules/services/unbound.nix index b053ee2..1e865a9 100644 --- a/modules/services/unbound.nix +++ b/modules/services/unbound.nix @@ -23,10 +23,15 @@ in { server = { interface = [ "0.0.0.0" ]; - access-control = [ "192.168.100.0/24 allow" ]; + access-control = [ + "127.0.0.1/8 allow" + "192.168.100.0/24 allow" + ]; }; include = "${inputs.hosts-blocklists}/unbound/unbound.blacklist.conf"; }; }; + + systemd.services.unbound.serviceConfig.ReadWritePaths = [ dir ]; }