aboutsummaryrefslogtreecommitdiffstats
path: root/hosts
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2024-05-07 20:53:07 -0700
committerMark Nipper <nipsy@bitgnome.net>2024-05-07 20:53:07 -0700
commit0fb995b894cba9f8a6d491d374255f88f71fbed4 (patch)
tree90e8248e3218d3211763ad52b1244043f21f4a87 /hosts
parent298ad311e1392ef80a6909ca073237fc09c8d53e (diff)
downloadnix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar.gz
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar.bz2
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar.lz
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar.xz
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.tar.zst
nix-0fb995b894cba9f8a6d491d374255f88f71fbed4.zip
Add some services to darkstar
Diffstat (limited to '')
-rw-r--r--hosts/darkstar/default.nix1
-rw-r--r--hosts/darkstar/services.nix47
2 files changed, 48 insertions, 0 deletions
diff --git a/hosts/darkstar/default.nix b/hosts/darkstar/default.nix
index 4d9dbff..19d15a0 100644
--- a/hosts/darkstar/default.nix
+++ b/hosts/darkstar/default.nix
@@ -25,6 +25,7 @@
imports = [
./hardware-configuration.nix
+ ./services.nix
../common/core
#../common/optional/db.nix
#../common/optional/dev.nix
diff --git a/hosts/darkstar/services.nix b/hosts/darkstar/services.nix
new file mode 100644
index 0000000..90face3
--- /dev/null
+++ b/hosts/darkstar/services.nix
@@ -0,0 +1,47 @@
+{
+ services.chrony = {
+ enable = true;
+ extraConfig = ''
+ local stratum 3
+ binddevice enp116s0
+ allow 192.168.1/24
+ server time.cloudflare.com iburst nts
+ '';
+ };
+
+ services.unbound = {
+ enable = true;
+ settings = {
+ server = {
+ access-control = [
+ "0.0.0.0/0 refuse"
+ "127.0.0.0/8 allow"
+ "::0/0 refuse"
+ "::1 allow"
+ "192.168.1.0/24 allow"
+ ];
+ hide-identity = true;
+ hide-version = true;
+ interface = [
+ "lo"
+ "enp116s0"
+ ];
+ local-data = [
+ "\"darkstar.bitgnome.net. IN A 192.168.1.1\""
+ "\"arrakis.bitgnome.net. IN A 192.168.1.2\""
+ "\"ginaz.bitgnome.net. IN A 192.168.1.17\""
+ "\"ginaz.bitgnome.net. IN A 192.168.1.17\""
+ ];
+ local-data-ptr = [
+ "\"192.168.1.1 darkstar.bitgnome.net\""
+ "\"192.168.1.2 arrakis.bitgnome.net\""
+ "\"192.168.1.17 ginaz.bitgnome.net\""
+ ];
+ local-zone = [
+ "\"bitgnome.net.\" transparent"
+ "\"1.168.192.in-addr.arpa.\" static"
+ ];
+ };
+ };
+ };
+}