servers/mermet/nsd.nix

   1 {pkgs, lib, config, ...}:
   2 let
   3   inherit (config) networking;
   4   inherit (config.services) nsd;
   5 in
   6 {
   7   imports = [
   8     nsd/sourcephile.nix
   9   ];
  10   services.nsd = {
  11     enable = true;
  12     ipv4 = true;
  13     ipv6 = true;
  14     verbosity = 5;
  15     #zones = {};
  16     interfaces = lib.unique [
  17       (builtins.elemAt networking.interfaces.enp1s0.ipv4.addresses 0).address
  18       #("["+(builtins.elemAt networking.interfaces.enp1s0.ipv6.addresses 0).address+"]")
  19     ];
  20     # SEE: http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/
  21     ratelimit.size = 10000;
  22     extraConfig = ''
  23     '';
  24   };
  25 }