[ns1] setup forwarding, open ports

2026-01-30 20:25:10 +01:00
parent bec232a023
commit b4d199d00c
1 changed files with 18 additions and 0 deletions
--- a/machines/ns1/configuration.nix
+++ b/machines/ns1/configuration.nix
@@ -19,8 +19,26 @@ in
    ../modules/autoupdate.nix
  ];

+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
+
  services.bind = {
    enable = true;
+    forwarders = [
+      "1.1.1.1"
+      "1.0.0.1"
+    ];
+  
+    cacheNetworks = [
+      "127.0.0.0/24"
+      "10.0.0.0/24"
+      "192.168.1.0/24"
+      "10.100.0.0/24"
+    ];
+
    zones = {
      "malobeo.org" = {
        master = true;