chore: cleaned up comments
This commit is contained in:
parent
a24fd5bd93
commit
bd59fcbeb3
1 changed files with 1 additions and 46 deletions
|
|
@ -1,18 +1,10 @@
|
||||||
{ config, pkgs, lib, ... }:
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
let
|
|
||||||
domain = "hexname.com";
|
|
||||||
# pdnsIp = "10.89.0.53";
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
virtualisation.oci-containers.containers = {
|
virtualisation.oci-containers.containers = {
|
||||||
hexname-powerdns = {
|
hexname-powerdns = {
|
||||||
image = "pschiffe/pdns-pgsql:latest";
|
image = "pschiffe/pdns-pgsql:latest";
|
||||||
hostname = "ns1.${domain}";
|
hostname = "ns1.hexname.com";
|
||||||
# ports = [
|
|
||||||
# "127.0.0.1:8081:8081/tcp"
|
|
||||||
# ];
|
|
||||||
# networks = [ "hexname-net" ];
|
|
||||||
|
|
||||||
volumes = [
|
volumes = [
|
||||||
"/etc/localtime:/etc/localtime:ro"
|
"/etc/localtime:/etc/localtime:ro"
|
||||||
|
|
@ -20,10 +12,8 @@ in
|
||||||
|
|
||||||
environmentFiles = [ "/etc/env/hexname/powerdns.env" ];
|
environmentFiles = [ "/etc/env/hexname/powerdns.env" ];
|
||||||
environment = {
|
environment = {
|
||||||
# PDNS_primary = "yes";
|
|
||||||
PDNS_api = "yes";
|
PDNS_api = "yes";
|
||||||
PDNS_disable_axfr = "yes";
|
PDNS_disable_axfr = "yes";
|
||||||
#PDNS_webserver = "yes";
|
|
||||||
PDNS_webserver_address = "127.0.0.1";
|
PDNS_webserver_address = "127.0.0.1";
|
||||||
PDNS_webserver_port = "8081";
|
PDNS_webserver_port = "8081";
|
||||||
PDNS_local_address = "0.0.0.0:53";
|
PDNS_local_address = "0.0.0.0:53";
|
||||||
|
|
@ -31,9 +21,6 @@ in
|
||||||
PDNS_version_string = "anonymous";
|
PDNS_version_string = "anonymous";
|
||||||
PDNS_default_ttl = "3600";
|
PDNS_default_ttl = "3600";
|
||||||
|
|
||||||
# PDNS_gpgsql_password=...
|
|
||||||
# PDNS_api_key=...
|
|
||||||
|
|
||||||
PDNS_gpgsql_host = "127.0.0.1";
|
PDNS_gpgsql_host = "127.0.0.1";
|
||||||
PDNS_gpgsql_port = "5432";
|
PDNS_gpgsql_port = "5432";
|
||||||
PDNS_gpgsql_dbname = "powerdns";
|
PDNS_gpgsql_dbname = "powerdns";
|
||||||
|
|
@ -44,41 +31,9 @@ in
|
||||||
extraOptions = [
|
extraOptions = [
|
||||||
"--network=host"
|
"--network=host"
|
||||||
];
|
];
|
||||||
# dependsOn = [ "hexname-postgres" ];
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# systemd.services.podman-network-hexname = {
|
|
||||||
# description = "Podman network for HexName/PowerDNS";
|
|
||||||
# after = [ "podman.service" ];
|
|
||||||
# wantedBy = [ "multi-user.target" "podman-hexname-postgres.target" "podman-hexname-powerdns.target" ];
|
|
||||||
# serviceConfig.Type = "oneshot";
|
|
||||||
# path = [ pkgs.podman ] ;
|
|
||||||
# script = ''
|
|
||||||
# podman network inspect hexname-net >/dev/null 2>&1 || \
|
|
||||||
# podman network create hexname-net --subnet 10.89.0.0/24
|
|
||||||
# '';
|
|
||||||
# };
|
|
||||||
|
|
||||||
# Bind port 53 and send all requests to the container
|
|
||||||
# networking.nftables.enable = true;
|
|
||||||
# networking.nftables.tables.dns = {
|
|
||||||
# family = "inet";
|
|
||||||
# content = ''
|
|
||||||
# chain prerouting {
|
|
||||||
# type nat hook prerouting priority -100;
|
|
||||||
|
|
||||||
# udp dport 53 dnat ip to ${pdnsIp}:53
|
|
||||||
# tcp dport 53 dnat ip to ${pdnsIp}:53
|
|
||||||
# }
|
|
||||||
|
|
||||||
# chain postrouting {
|
|
||||||
# type nat hook postrouting priority 100;
|
|
||||||
# ip saddr 10.89.0.0/24 masquerade
|
|
||||||
# }
|
|
||||||
# '';
|
|
||||||
# };
|
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [ 53 ];
|
networking.firewall.allowedTCPPorts = [ 53 ];
|
||||||
networking.firewall.allowedUDPPorts = [ 53 ];
|
networking.firewall.allowedUDPPorts = [ 53 ];
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue