pub-solar/infra
6
1
Fork 3
Code Issues 23 Pull requests 10 Actions Packages Projects 1 Releases Wiki Activity
infra/modules
History
teutat3s d5922ff2b8
All checks were successful
Flake checks / Check (pull_request) Successful in 16m35s
Details
fix: disable DNSSEC for now because of an issue in 
systemd https://github.com/systemd/systemd/issues/10579

Without this change, there are random SERVFAIL responses with Greenbaum DNS
when using allow-downgrade. Fixes DNS queries for lev-1.int.greenbaum.zone

❯ dig obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone

; <<>> DiG 9.18.19 <<>> obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1871
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone. IN A

;; ANSWER SECTION:
obs-portal.svc.e5756d08-36fd-424b-f8bc-acdb92ca7b82.lev-1.int.greenbaum.zone. 22 IN A 192.168.128.82

;; Query time: 105 msec
;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP)
;; WHEN: Thu Nov 09 10:38:02 UTC 2023
;; MSG SIZE  rcvd: 121
2023-11-15 18:54:32 +00:00
..
default.nix flora-6: refactor to use flake.parts 2023-11-15 18:54:32 +00:00
docker.nix refactor: change file structure to use modules dir 2023-11-06 13:11:30 +01:00
networking.nix fix: disable DNSSEC for now because of an issue in 2023-11-15 18:54:32 +00:00
nix.nix refactor: change file structure to use modules dir 2023-11-06 13:11:30 +01:00
terminal-tooling.nix refactor: change file structure to use modules dir 2023-11-06 13:11:30 +01:00
unlock-zfs-on-boot.nix refactor: change file structure to use modules dir 2023-11-06 13:11:30 +01:00
users.nix nachtigall: move SSH private key from user to host 2023-11-15 18:54:32 +00:00