nixos-config/nixos/networking/unbound.nix
2024-05-10 17:15:57 +05:00

32 lines
613 B
Nix

{ config, ... }:
{
services.unbound = {
enable = true;
settings = {
server = {
qname-minimisation = "yes";
interface = "0.0.0.0";
access-control = [
"192.168.0.0/24 allow"
"10.100.0.0/24 allow"
];
local-zone = [
"\"vault.comfycamp.space\" static"
];
local-data = [
"\"vault.comfycamp.space IN A 10.100.0.1\""
];
};
forward-zone = [
{
name = ".";
forward-addr = [
"1.1.1.1"
"8.8.8.8"
];
}
];
};
};
}