{pkgs, lib, config, ...}: let inherit (config.services) nsd; in { imports = [ nsd/sourcephile.nix ]; config = { services.nsd = { enable = true; ipv4 = true; ipv6 = true; verbosity = 5; # SEE: http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/ ratelimit.size = 10000; extraConfig = '' ''; interfaces = lib.unique [ "127.0.0.1" "::1" config.networking.zones.lan.ipv4 config.networking.zones.net.ipv4 ]; }; }; }