b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/pdns-recursor: update default values

Browse source 
1. Update the default values of several addresses-related settings
   that have been changed by upstream.

2. Make `dns.address` take multiple addresses. This is needed
   for dual stack, now working by default.
This commit is contained in:
rnhmjoj 2022-04-13 17:40:11 +02:00
parent cb80b946a4
commit fd480f55df
No known key found for this signature in database
GPG key ID: BFBAF4C975F76450
1 changed files with 12 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
nixos/modules/services/networking/pdns-recursor.nix
View file

@ -30,10 +30,10 @@ in {
enable = mkEnableOption "PowerDNS Recursor, a recursive DNS server"; enable = mkEnableOption "PowerDNS Recursor, a recursive DNS server";
dns.address = mkOption { dns.address = mkOption {
type = types.str; type = oneOrMore types.str;
default = "0.0.0.0"; default = [ "::" "0.0.0.0" ];
description = '' description = ''
IP address Recursor DNS server will bind to. IP addresses Recursor DNS server will bind to.
''; '';
}; };
@ -47,8 +47,12 @@ in {
dns.allowFrom = mkOption { dns.allowFrom = mkOption {
type = types.listOf types.str; type = types.listOf types.str;
default = [ "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16" ]; default = [
example = [ "0.0.0.0/0" ]; "127.0.0.0/8" "10.0.0.0/8" "100.64.0.0/10"
"169.254.0.0/16" "192.168.0.0/16" "172.16.0.0/12"
"::1/128" "fc00::/7" "fe80::/10"
];
example = [ "0.0.0.0/0" "::/0" ];
description = '' description = ''
IP address ranges of clients allowed to make DNS queries. IP address ranges of clients allowed to make DNS queries.
''; '';
@ -72,7 +76,8 @@ in {
api.allowFrom = mkOption { api.allowFrom = mkOption {
type = types.listOf types.str; type = types.listOf types.str;
default = [ "0.0.0.0/0" ]; default = [ "127.0.0.1" "::1" ];
example = [ "0.0.0.0/0" "::/0" ];
description = '' description = ''
IP address ranges of clients allowed to make API requests. IP address ranges of clients allowed to make API requests.
''; '';
@ -96,7 +101,7 @@ in {
forwardZonesRecurse = mkOption { forwardZonesRecurse = mkOption {
type = types.attrs; type = types.attrs;
example = { eth = "127.0.0.1:5353"; }; example = { eth = "[::1]:5353"; };
default = {}; default = {};
description = '' description = ''
DNS zones to be forwarded to other recursive servers. DNS zones to be forwarded to other recursive servers.