64 lines
1.4 KiB
Nix
64 lines
1.4 KiB
Nix
|
{config, pkgs}:
|
||
|
|
let
|
||
|
|
startingDependency = if config.services.gw6c.enable then "gw6c" else "network-interfaces";
|
||
|
|
cfg = config.services.bind;
|
||
|
|
concatMapStrings = pkgs.lib.concatMapStrings;
|
||
|
|
|
||
|
|
namedConf =
|
||
|
|
(''
|
||
|
|
acl cachenetworks { ${concatMapStrings (entry: " ${entry}; ") cfg.cacheNetworks} };
|
||
|
|
acl badnetworks { ${concatMapStrings (entry: " ${entry}; ") cfg.blockedNetworks} };
|
||
|
|
|
||
|
|
options {
|
||
|
|
allow-query { cachenetworks; };
|
||
|
|
blackhole { badnetworks; };
|
||
|
|
forward first;
|
||
|
|
forwarders { ${concatMapStrings (entry: " ${entry}; ") config.networking.nameservers} };
|
||
|
|
directory "/var/run/named";
|
||
|
|
pid-file "/var/run/named/named.pid";
|
||
|
|
};
|
||
|
|
|
||
|
|
'')
|
||
|
|
+
|
||
|
|
(concatMapStrings
|
||
|
|
(_entry:let entry={master=true;slaves=[];masters=[];}//_entry; in
|
||
|
|
''
|
||
|
|
zone "${entry.name}" {
|
||
|
|
type ${if entry.master then "master" else "slave"};
|
||
|
|
file "${entry.file}";
|
||
|
|
${ if entry.master then
|
||
|
|
''
|
||
|
|
allow-transfer {
|
||
|
|
${concatMapStrings (ip: ip+";\n") entry.slaves}
|
||
|
|
};
|
||
|
|
''
|
||
|
|
else
|
||
|
|
''
|
||
|
|
masters {
|
||
|
|
${concatMapStrings (ip: ip+";\n") entry.masters}
|
||
|
|
};
|
||
|
|
''
|
||
|
|
}
|
||
|
|
};
|
||
|
|
''
|
||
|
|
)
|
||
|
|
cfg.zones
|
||
|
|
)
|
||
|
|
;
|
||
|
|
|
||
|
|
confFile = pkgs.writeText "named.conf" namedConf;
|
||
|
|
|
||
|
|
in
|
||
|
|
{
|
||
|
|
name = "bind";
|
||
|
|
job = ''
|
||
|
|
description "BIND name server job"
|
||
|
|
|
||
|
|
start script
|
||
|
|
${pkgs.coreutils}/bin/mkdir -p /var/run/named
|
||
|
|
end script
|
||
|
|
|
||
|
|
respawn ${pkgs.bind}/sbin/named -c ${confFile} -f
|
||
|
|
'';
|
||
|
|
}
|