From 4dfb2e31d2a21158d2f07486f269cf468082607b Mon Sep 17 00:00:00 2001
From: "quentin@aristote.fr" <quentin@aristote.fr>
Date: Sat, 1 Apr 2023 15:08:14 +0200
Subject: networking: modularize

---
 config/networking/services/dns.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 config/networking/services/dns.nix

(limited to 'config/networking/services/dns.nix')

diff --git a/config/networking/services/dns.nix b/config/networking/services/dns.nix
new file mode 100644
index 0000000..beed1e7
--- /dev/null
+++ b/config/networking/services/dns.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+
+let cfg = config.personal.networking;
+in {
+  services.unbound = {
+    enable = true;
+    settings = {
+      server = {
+        interface = [ "127.0.0.1" "${cfg.subnets.private}.1" ];
+        access-control = [
+          "0.0.0.0/0 refuse"
+          "127.0.0.0/8 allow"
+          "${cfg.subnets.private}.0/24 allow"
+        ];
+      };
+    };
+  };
+}
-- 
cgit v1.2.3