diff options
| author | quentin@aristote.fr <quentin@aristote.fr> | 2023-06-26 22:01:08 +0200 |
|---|---|---|
| committer | quentin@aristote.fr <quentin@aristote.fr> | 2023-06-26 22:23:29 +0200 |
| commit | c7b7efb30112ce492569f8ddea591f14a5040f57 (patch) | |
| tree | 65032e1a3dbebc1b3b351515f419e7c7cfc27879 /config/networking/services/dns.nix | |
| parent | ffa8760638e20eee785f7ed4df9e2d56c18ffe53 (diff) | |
networking: detach enp3s0 from wan
Diffstat (limited to 'config/networking/services/dns.nix')
| -rw-r--r-- | config/networking/services/dns.nix | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/config/networking/services/dns.nix b/config/networking/services/dns.nix index cce2f17..9e70958 100644 --- a/config/networking/services/dns.nix +++ b/config/networking/services/dns.nix @@ -7,18 +7,21 @@ in { settings = { server = { module-config = ''"respip validator iterator"''; - interface = - [ "127.0.0.1" "${nets.wan.subnet}.1" "${nets.iot.subnet}.1" ]; + interface = [ + "127.0.0.1" + "${nets.wan.subnet}.1" + "${nets.iot.subnet}.1" + "${nets.eth0.subnet}.1" + ]; access-control = [ "0.0.0.0/0 refuse" "127.0.0.0/8 allow" "${nets.wan.subnet}.0/24 allow" "${nets.iot.subnet}.0/24 allow" + "${nets.eth0.subnet}.0/24 allow" ]; }; - rpz = { - name = "rpz.oisd.nl"; - }; + rpz = { name = "rpz.oisd.nl"; }; }; }; } |