119 lines
3.9 KiB
Nix
119 lines
3.9 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
# Define your DNS records declaratively
|
|
let
|
|
dnsRecords = {
|
|
"lan." = {
|
|
ttl = 86400; # Time-to-live for records in this zone
|
|
ns = [ "hoardfrost.lan." ]; # Nameserver record
|
|
soa = {
|
|
nameServer = "hoardfrost.lan.";
|
|
adminEmail = "root.lan.";
|
|
serial = "2025091901"; # Update this serial number with each change
|
|
refresh = "3600";
|
|
retry = "1800";
|
|
expire = "604800";
|
|
minimum = "86400";
|
|
};
|
|
|
|
# Define your host records (A for IPv4, AAAA for IPv6)
|
|
records = {
|
|
# Your NixOS server acting as the DNS server
|
|
hoardfrost = [
|
|
{ type = "A"; content = "10.0.0.217"; }
|
|
{ type = "AAAA"; content = "2601:282:180:630::803b"; }
|
|
];
|
|
|
|
# Other devices on your local network
|
|
router = [
|
|
{ type = "A"; content = "10.0.0.1"; }
|
|
{ type = "AAAA"; content = "fe80::1"; }
|
|
];
|
|
|
|
yukigekko = [
|
|
{ type = "A"; content = "10.0.0.210"; }
|
|
{ type = "AAAA"; content = "2601:282:180:630::e2e"; }
|
|
];
|
|
|
|
wesbos = [
|
|
{ type = "A"; content = "10.0.0.110";}
|
|
# { type = "AAAA"; content = "";}
|
|
];
|
|
|
|
wsl-hive = [
|
|
{type = "A"; content = "172.18.84.193";}
|
|
{type = "AAAA"; content = "fe80::215:5dff:fec1:e4b5";}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
# This function generates the zone file string from the Nix expression
|
|
generateZoneFile = zoneName: zoneConfig:
|
|
let
|
|
soaRecord = "${zoneName} ${toString zoneConfig.ttl} IN SOA ${zoneConfig.soa.nameServer} ${zoneConfig.soa.adminEmail} ( ${zoneConfig.soa.serial} ${zoneConfig.soa.refresh} ${zoneConfig.soa.retry} ${zoneConfig.soa.expire} ${zoneConfig.soa.minimum} )";
|
|
nsRecords = lib.concatStringsSep "\n" (lib.map (ns: "${zoneName} ${toString zoneConfig.ttl} IN NS ${ns}") zoneConfig.ns);
|
|
hostRecords = lib.concatStringsSep "\n" (lib.flatten (lib.mapAttrsToList (hostname: records:
|
|
lib.map (record: "${hostname}.${zoneName} ${toString zoneConfig.ttl} IN ${record.type} ${record.content}") records
|
|
) zoneConfig.records));
|
|
in
|
|
''
|
|
$ORIGIN ${zoneName}
|
|
${soaRecord}
|
|
${nsRecords}
|
|
${hostRecords}
|
|
'';
|
|
|
|
# Generate the zone file using the `generateZoneFile` function
|
|
lanZoneFile = pkgs.writeText "lan.zone" (generateZoneFile "lan." dnsRecords."lan.");
|
|
|
|
# Configure hickory-dns with the generated zone file
|
|
hickoryConfig = pkgs.writeText "hickory-config.toml" ''
|
|
listen_addrs_ipv4 = ["127.0.0.1", "10.0.0.217"] # Change to your NixOS server's IPv4
|
|
listen_addrs_ipv6 = ["::1", "fe80::215:5dff:fec1:e4b5"] # Change to your NixOS server's IPv6
|
|
|
|
# Configure as an authoritative server for the local zone
|
|
[[zones]]
|
|
zone = "lan."
|
|
zone_type = "Primary"
|
|
file = "${lanZoneFile}"
|
|
|
|
# Configure as a recursive resolver for all other queries
|
|
[[recursor]]
|
|
# All queries *not* matching the "lan." zone will be forwarded here.
|
|
[[recursor.forwarders]]
|
|
name_servers = ["8.8.8.8:53", "[2001:4860:4860::8888]:53"]
|
|
# All other DNS queries will be handled recursively, starting from the root hints.
|
|
'';
|
|
|
|
in
|
|
{
|
|
systemd.services.hickory-dns = {
|
|
enable = true;
|
|
description = "Hickory DNS with local zone";
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
User = "hickory";
|
|
Group = "hickory";
|
|
ExecStart = "${pkgs.hickory-dns}/bin/hickory-dns -c ${hickoryConfig}";
|
|
Restart = "on-failure";
|
|
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
|
|
DynamicUser = true;
|
|
StateDirectory = "hickory";
|
|
};
|
|
};
|
|
|
|
users.groups.hickory = {};
|
|
users.users.hickory = {
|
|
isSystemUser = true;
|
|
group = "hickory";
|
|
};
|
|
|
|
environment.systemPackages = [ pkgs.hickory-dns ];
|
|
|
|
# Configure your NixOS machine to use itself as the DNS resolver
|
|
services.resolved.enable = false;
|
|
networking.nameservers = [ "127.0.0.1" "fdaa:a00:0:1::100" ];
|
|
}
|