]> Git — Sourcephile - sourcephile-nix.git/blob - servers/mermet/nsd.nix
mermet: add unbound and nsd
[sourcephile-nix.git] / servers / mermet / nsd.nix
1 {pkgs, lib, config, ...}:
2 let
3 inherit (config) networking;
4 inherit (config.services) nsd;
5 in
6 {
7 imports = [
8 nsd/sourcephile.nix
9 ];
10 services.nsd = {
11 enable = true;
12 ipv4 = true;
13 ipv6 = true;
14 verbosity = 5;
15 #zones = {};
16 interfaces = lib.unique [
17 (builtins.elemAt networking.interfaces.enp1s0.ipv4.addresses 0).address
18 (builtins.elemAt networking.interfaces.enp1s0.ipv6.addresses 0).address
19 ];
20 # SEE: http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/
21 ratelimit.size = 10000;
22 extraConfig = ''
23 '';
24 };
25 }