From 39840ae4e8600a8546563b6521d7df5acb35037e Mon Sep 17 00:00:00 2001
From: Leonardo <noreply@leoflo.me>
Date: Wed, 18 Mar 2026 18:33:06 +0100
Subject: dns server

---
 components/services/bind.nix  | 31 +++++++++++++++++++++++++++++++
 components/services/caddy.nix | 25 ++++++++++++++++---------
 2 files changed, 47 insertions(+), 9 deletions(-)
 create mode 100644 components/services/bind.nix

(limited to 'components')

diff --git a/components/services/bind.nix b/components/services/bind.nix
new file mode 100644
index 0000000..79f0608
--- /dev/null
+++ b/components/services/bind.nix
@@ -0,0 +1,31 @@
+{lib, config, pkgs, ...}: {
+  options.bind.enable = lib.mkEnableOption "Bind dns server";
+
+  config = lib.mkIf config.bind.enable {
+    services.bind = {
+      enable = true;
+
+      forwarders = [ "208.67.222.222" "208.67.220.220" ];
+
+      zones = {
+        "home.arpa" = {
+          master = true;
+          allowQuery = [ "127.0.0.0/24" "10.0.69.0/24" ];
+          file = pkgs.writeText "home.arpa" ''
+            $TTL 86400
+            @ IN SOA ns1.home.arpa. admin.home.arpa. (
+              2026031801 ; serial
+              3600       ; refresh
+              900        ; retry
+              604800     ; expire
+              86400      ; minimum TTL
+            )
+            @   IN NS  ns1.home.arpa.
+            ns1 IN A   10.69.0.1
+            @   IN A   10.69.0.1
+          '';
+        };
+      };
+    };
+  };
+}
diff --git a/components/services/caddy.nix b/components/services/caddy.nix
index affe855..9c90535 100644
--- a/components/services/caddy.nix
+++ b/components/services/caddy.nix
@@ -5,16 +5,23 @@
     services.caddy = {
       enable = true;
 
-      virtualHosts."leoflo.me".extraConfig = ''
-        root /srv/leoflo.me/src
-        templates
-        file_server
-      '';
+      virtualHosts = {
+        "leoflo.me".extraConfig = ''
+          root /srv/leoflo.me/src
+          templates
+          file_server
+        '';
 
-      virtualHosts."files.leoflo.me".extraConfig = ''
-        root /srv/files.leoflo.me
-        file_server browse
-      '';
+        "files.leoflo.me".extraConfig = ''
+          root /srv/files.leoflo.me
+          file_server browse
+        '';
+
+        "home.arpa".extraConfig = ''
+          respond "Benvenuto nella rete privata di leo :D"
+          tls internal
+        '';
+      };
     };
   };
 }
-- 
cgit v1.3