components/services/bind.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

{lib, config, pkgs, ...}: {
  options.bind.enable = lib.mkEnableOption "Bind dns server";

  config = lib.mkIf config.bind.enable {
    services.bind = {
      enable = true;

      forwarders = [ "1.1.1.1" "8.8.8.8" ];
      forward = "only";

      cacheNetworks = [ "127.0.0.0/8" "10.69.0.0/24" ];

      zones = {
        "home.arpa" = {
          master = true;
          allowQuery = [ "127.0.0.0/8" "10.69.0.0/24" ];
          file = pkgs.writeText "home.arpa" ''
            $TTL 86400

            @ IN SOA ns1.home.arpa. admin.home.arpa. (
              2026031801 ; serial
              3600       ; refresh
              900        ; retry
              604800     ; expire
              86400      ; minimum TTL
            )

            @   IN NS  ns1.home.arpa.
            ns1 IN A   10.69.0.1
            @   IN A   10.69.0.1

            music   IN CNAME @
            images  IN CNAME @
            papers  IN CNAME @
            cinema  IN CNAME @
            torrent IN CNAME @
          '';
        };
      };
    };
  };
}