dev/nixfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

nixos/dns: Allow internal zone transfers

Browse Source 
Permit AXFR from shared internal networks and cross-site egress
addresses while retaining loopback and the existing secondary.
This commit is contained in:
Jack O'Sullivan
2026-08-02 01:07:03 +01:00
parent 08605ab422
commit 8f9ca5e1c4
2 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/boxes/colony/vms/estuary/dns.nix
+5 -1
View File
@@ -114,8 +114,12 @@ in
]; ];
also-notify = [ "127.0.0.1" ]; also-notify = [ "127.0.0.1" ];
allow-axfr-ips = [ allow-axfr-ips = [
"127.0.0.0/8" "::1/128"
"216.218.133.2" "2001:470:600::2" "216.218.133.2" "2001:470:600::2"
]; ]
++ lib.my.c.home.routersPubV4
++ lib.my.c.as211024.trusted.v4
++ lib.my.c.as211024.trusted.v6;
enable-lua-records = true; enable-lua-records = true;
#loglevel = 7; #loglevel = 7;
#log-dns-queries = true; #log-dns-queries = true;
nixos/boxes/home/routing-common/dns.nix
+6
View File
@@ -170,6 +170,12 @@ in
"0.0.0.0:5353" "[::]:5353" "0.0.0.0:5353" "[::]:5353"
]; ];
also-notify = [ "127.0.0.1" ]; also-notify = [ "127.0.0.1" ];
allow-axfr-ips = [
"127.0.0.0/8" "::1/128"
allAssignments.estuary.internal.ipv4.address
]
++ lib.my.c.as211024.trusted.v4
++ lib.my.c.as211024.trusted.v6;
enable-lua-records = true; enable-lua-records = true;
# loglevel = 7; # loglevel = 7;
# log-dns-queries = true; # log-dns-queries = true;