dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

nixos/services.dnscache: remove with lib;

Browse Source
This commit is contained in:
Felix Buehler 2024-08-28 21:19:05 +02:00 committed by Jörg Thalheim
parent 630754ae20
commit 56576f90e3
1 changed files with 16 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
nixos/modules/services/networking/dnscache.nix
View File

@ -1,19 +1,16 @@
{ config, lib, pkgs, ... }:
with lib;
let
cfg = config.services.dnscache;
dnscache-root = pkgs.runCommand "dnscache-root" { preferLocalBuild = true; } ''
mkdir -p $out/{servers,ip}
${concatMapStrings (ip: ''
${lib.concatMapStrings (ip: ''
touch "$out/ip/"${lib.escapeShellArg ip}
'') cfg.clientIps}
${concatStrings (mapAttrsToList (host: ips: ''
${concatMapStrings (ip: ''
${lib.concatStrings (lib.mapAttrsToList (host: ips: ''
${lib.concatMapStrings (ip: ''
echo ${lib.escapeShellArg ip} >> "$out/servers/"${lib.escapeShellArg host}
'') ips}
'') cfg.domainServers)}
@ -35,33 +32,33 @@ in {
options = {
services.dnscache = {
enable = mkOption {
enable = lib.mkOption {
default = false;
type = types.bool;
type = lib.types.bool;
description = "Whether to run the dnscache caching dns server.";
};
ip = mkOption {
ip = lib.mkOption {
default = "0.0.0.0";
type = types.str;
type = lib.types.str;
description = "IP address on which to listen for connections.";
};
clientIps = mkOption {
clientIps = lib.mkOption {
default = [ "127.0.0.1" ];
type = types.listOf types.str;
type = lib.types.listOf lib.types.str;
description = "Client IP addresses (or prefixes) from which to accept connections.";
example = ["192.168" "172.23.75.82"];
};
domainServers = mkOption {
domainServers = lib.mkOption {
default = { };
type = types.attrsOf (types.listOf types.str);
type = lib.types.attrsOf (lib.types.listOf lib.types.str);
description = ''
Table of {hostname: server} pairs to use as authoritative servers for hosts (and subhosts).
If entry for @ is not specified predefined list of root servers is used.
'';
example = literalExpression ''
example = lib.literalExpression ''
{
"@" = ["8.8.8.8" "8.8.4.4"];
"example.com" = ["192.168.100.100"];
@ -69,9 +66,9 @@ in {
'';
};
forwardOnly = mkOption {
forwardOnly = lib.mkOption {
default = false;
type = types.bool;
type = lib.types.bool;
description = ''
Whether to treat root servers (for @) as caching
servers, requesting addresses the same way a client does. This is
@ -84,7 +81,7 @@ in {
###### implementation
config = mkIf config.services.dnscache.enable {
config = lib.mkIf config.services.dnscache.enable {
environment.systemPackages = [ pkgs.djbdns ];
users.users.dnscache = {
isSystemUser = true;
@ -104,7 +101,7 @@ in {
'';
script = ''
cd /var/lib/dnscache/
${optionalString cfg.forwardOnly "export FORWARDONLY=1"}
${lib.optionalString cfg.forwardOnly "export FORWARDONLY=1"}
exec ./run
'';
};