bind9: add new service #17

Merged

liske merged 2 commits from add-hidden-ans into master

2023-09-27 19:35:44 +02:00

liske commented

2023-09-03 18:31:11 +02:00

(Migrated from github.com)

Add bind9 for hidden primary dns setups to provide at least reverse zones for our IX prefix.

The bind9 configuration does not allow recursive lookups intentionally. It should be only used as hidden primary to provide zone transfers to known slaves.

I'm unsure about the networking.resolvconf.useLocalResolver setting. I explicitly set it to false because of the line 250 in bind.nix. The local name server should never be used for resolving arbitrary names.

Add bind9 for hidden primary dns setups to provide at least reverse zones for our IX prefix. The bind9 configuration does **not** allow recursive lookups intentionally. It should be only used as hidden primary to provide zone transfers to known slaves. I'm unsure about the `networking.resolvconf.useLocalResolver` setting. I explicitly set it to `false` because of the [line 250 in `bind.nix`](https://github.com/NixOS/nixpkgs/blob/a9148e8e8d57820d25ad0abfefb8d8440ff18096/nixos/modules/services/networking/bind.nix#L250C5-L250C5). The local name server should never be used for resolving arbitrary names.

neonwhiskers (Migrated from github.com) reviewed

2023-09-03 18:31:11 +02:00

tanneberger commented

2023-09-03 19:01:20 +02:00

(Migrated from github.com)

Currently, we still use resolvconf when #2 is merged we most probably switch over to systemd.resolvd