diff --git a/hosts/vulpes/infra/dns.nix b/hosts/vulpes/infra/dns.nix index 2527cd9..2f70ed6 100644 --- a/hosts/vulpes/infra/dns.nix +++ b/hosts/vulpes/infra/dns.nix @@ -1,7 +1,6 @@ { args, pkgs, - config, ... }: let @@ -130,6 +129,29 @@ let webhook IN A ${pm.net.ipv4.sand-archives.addr} webhook IN AAAA ${pm.net.ipv6.sand-archives.addr} ''; + + fennie-eu_zonefile = pkgs.writeText "zone_fennie.eu" '' + $ORIGIN fennie.eu. + $TTL 5m + @ IN SOA ns1.fennie.eu. pup.fennie.eu. ( + 2026022201 ; serial + 3h ; refresh + 1h ; retry + 1w ; expire + 1h ) ; negative cache TTL + + IN NS ns1.fennie.eu. + IN NS ns2.fennie.eu. + + ; Base domain and name server + ns1 IN A ${pm.net.ipv4.sand-archives.addr} + ns1 IN AAAA ${pm.net.ipv6.sand-archives.addr} + ns2 IN A ${pm.net.ipv4.sand-archives.addr} + ns2 IN AAAA ${pm.net.ipv6.sand-archives.addr} + @ IN A ${pm.net.ipv4.sand-archives.addr} + @ IN AAAA ${pm.net.ipv6.sand-archives.addr} + + ''; in { disabledModules = [ "services/networking/hickory-dns.nix" ]; @@ -201,6 +223,16 @@ in ''; file = awoo-ren_zonefile; }; + "fennie.eu" = { + master = true; + allowQuery = [ + "any" + ]; + extraConfig = '' + journal "/var/lib/named/fennie.eu.jnl"; + ''; + file = fennie-eu_zonefile; + }; }; }; diff --git a/hosts/work/users/roufpup/default.nix b/hosts/work/users/roufpup/default.nix index e39ab45..83fe8cb 100644 --- a/hosts/work/users/roufpup/default.nix +++ b/hosts/work/users/roufpup/default.nix @@ -25,7 +25,7 @@ in ]; openssh = { authorizedKeys.keys = [ - # Yubikey + # Nitrokey "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkUMYuTCjDCIldnrQlA8M5gPkEUZ/oXxD5+B7nNeoM3 openpgp:0x13D59319" ]; }; @@ -132,7 +132,7 @@ in awww umu-launcher erdtree - + openssl ] ++ [ #gui