losurdo: syncoid: fix nftables integration

[sourcephile-nix.git] / hosts / mermet / knot / sourcephile.fr.nix

diff --git a/hosts/mermet/knot/sourcephile.fr.nix b/hosts/mermet/knot/sourcephile.fr.nix
index 0ca28262e2e9d039e3d38e1c45f02088d77cb0ff..6b788a1fc201457028fdb209ec270c28641972a2 100644 (file)
--- a/hosts/mermet/knot/sourcephile.fr.nix
+++ b/hosts/mermet/knot/sourcephile.fr.nix
@@ -1,4 +1,12 @@
-{ pkgs, lib, config, inputs, hosts, info, ... }:
+{
+  pkgs,
+  lib,
+  config,
+  inputs,
+  hosts,
+  info,
+  ...
+}:
 let
   domain = "sourcephile.fr";
   domainID = lib.replaceStrings [ "." ] [ "_" ] domain;
@@ -22,7 +30,7 @@ let
 
       ; NS (Name Server)
       @ NS ns
-      ${lib.concatMapStringsSep "\n" ({name, ...}: "@ NS ${name}.") info.lebureau.dns.secondary.ns}
+      ${lib.concatMapStringsSep "\n" ({ name, ... }: "@ NS ${name}.") info.lebureau.dns.secondary.ns}
       i NS ns
       whoami4 NS ns.whoami4
       ns.whoami4 A ${hosts.mermet._module.args.ipv4}
@@ -68,6 +76,8 @@ let
       nix-serve        CNAME losurdo
       nix-extracache   CNAME losurdo
       nix-localcache   CNAME lan.losurdo
+      ; See https://keys.openpgp.org/about/usage#wkd-as-a-service
+      openpgpkey       CNAME wkd.keys.openpgp.org.
       sftp             CNAME losurdo
       radicle-mermet   CNAME mermet
       radicle          CNAME mermet
@@ -93,9 +103,9 @@ let
       ; DOC: https://blog.qualys.com/ssllabs/2017/03/13/caa-mandated-by-cabrowser-forum
       @ CAA 128 issue "letsencrypt.org; validationmethods=dns-01"
     '';
-  # Incorrect:
-  # accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/78014180
 in
+# Incorrect:
+# accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/78014180
 {
   services.knot.settingsFreeform = {
     remote.ns_iodine.address = "127.0.0.1@1053";
@@ -120,8 +130,14 @@ in
       action = "update";
       update-owner = "name";
       update-owner-match = "equal";
-      update-owner-name = [ "losurdo" "lan.losurdo" ];
-      update-type = [ "A" "AAAA" ];
+      update-owner-name = [
+        "losurdo"
+        "lan.losurdo"
+      ];
+      update-type = [
+        "A"
+        "AAAA"
+      ];
     };
     acl."acl_lebureau_${domainID}" = {
       action = "transfer";
@@ -225,7 +241,8 @@ in
       }; }
     }
   '';
-  /* Useless since the zone is public
+  /*
+    Useless since the zone is public
     services.unbound.settings = {
     stub-zone = {
     name = domain;