Smayzy/nix-config
1
1
Fork 0
Code Issues Pull Requests Actions Wiki Activity

format nix code
nixos config pipeline / show-flake (push) Successful in 27s
Details
nixos config pipeline / deploy (push) Successful in 1m38s
Details

Browse Source
This commit is contained in:
smayzy
2025-10-09 17:55:32 +02:00
parent e776e94484
commit d341c0c3f1
6 changed files with 444 additions and 365 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/nix/containers/nixos/unbound.nix
+40 -38
View File
@@ -16,55 +16,57 @@ in
description = "ip addr e.g. (192.168.1.20)";
};
};
config = mkIf cfg.enable {
containers.unbound = {
autoStart = true;
privateNetwork = true;
hostBridge = net.bridge;
localAddress = cfg.ip;
config = { ... }: {
system.stateVersion = "25.11";
config =
{ ... }:
{
system.stateVersion = "25.11";
services.unbound = {
enable = true;
settings = {
server = {
interface = [ "0.0.0.0" ];
qname-minimisation = "yes";
minimal-responses = "no";
access-control = [
"127.0.0.0/8 allow"
"192.168.0.0/16 allow"
];
private-domain = [ "internal.smayzy.ovh" ];
local-zone = [ "internal.smayzy.ovh. static" ];
local-data = [
''"npm-local.internal.smayzy.ovh. A 192.168.1.181"''
''"npm.internal.smayzy.ovh. A 192.168.1.181"''
''"nfs-srv1.internal.smayzy.ovh. A 192.168.1.48"''
''"traefik.internal.smayzy.ovh. A 192.168.1.203"''
services.unbound = {
enable = true;
settings = {
server = {
interface = [ "0.0.0.0" ];
qname-minimisation = "yes";
minimal-responses = "no";
access-control = [
"127.0.0.0/8 allow"
"192.168.0.0/16 allow"
];
private-domain = [ "internal.smayzy.ovh" ];
local-zone = [ "internal.smayzy.ovh. static" ];
local-data = [
''"npm-local.internal.smayzy.ovh. A 192.168.1.181"''
''"npm.internal.smayzy.ovh. A 192.168.1.181"''
''"nfs-srv1.internal.smayzy.ovh. A 192.168.1.48"''
''"traefik.internal.smayzy.ovh. A 192.168.1.203"''
''"bazarr-anime.internal.smayzy.ovh. A 192.168.1.203"''
''"bazarr.internal.smayzy.ovh. A 192.168.1.203"''
''"lidarr.internal.smayzy.ovh. A 192.168.1.203"''
''"nzbget.internal.smayzy.ovh. A 192.168.1.203"''
''"prowlarr.internal.smayzy.ovh. A 192.168.1.203"''
''"qbittorrent.internal.smayzy.ovh. A 192.168.1.203"''
''"radarr.internal.smayzy.ovh. A 192.168.1.203"''
''"sonarr-anime.internal.smayzy.ovh. A 192.168.1.203"''
''"sonarr.internal.smayzy.ovh. A 192.168.1.203"''
''"srv1-proxmox.internal.smayzy.ovh. A 192.168.1.203"''
''"srv2-proxmox.internal.smayzy.ovh. A 192.168.1.203"''
];
''"bazarr-anime.internal.smayzy.ovh. A 192.168.1.203"''
''"bazarr.internal.smayzy.ovh. A 192.168.1.203"''
''"lidarr.internal.smayzy.ovh. A 192.168.1.203"''
''"nzbget.internal.smayzy.ovh. A 192.168.1.203"''
''"prowlarr.internal.smayzy.ovh. A 192.168.1.203"''
''"qbittorrent.internal.smayzy.ovh. A 192.168.1.203"''
''"radarr.internal.smayzy.ovh. A 192.168.1.203"''
''"sonarr-anime.internal.smayzy.ovh. A 192.168.1.203"''
''"sonarr.internal.smayzy.ovh. A 192.168.1.203"''
''"srv1-proxmox.internal.smayzy.ovh. A 192.168.1.203"''
''"srv2-proxmox.internal.smayzy.ovh. A 192.168.1.203"''
];
};
};
};
networking.defaultGateway = net.gateway;
networking.nameservers = net.dns;
networking.firewall.allowedTCPPorts = [ 53 ];
networking.firewall.allowedUDPPorts = [ 53 ];
};
networking.defaultGateway = net.gateway;
networking.nameservers = net.dns;
networking.firewall.allowedTCPPorts = [ 53 ];
networking.firewall.allowedUDPPorts = [ 53 ];
};
};
};
}