dachxy/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

changes: remove zellij from default modules

Browse source
This commit is contained in:
danny 2025-10-31 14:48:26 +08:00
parent 7fcf26263a
commit d1f25b377f
14 changed files with 131 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

10
system/dev/dn-server/default.nix
View file

@ -1,10 +1,6 @@
{ hostname }:
{
pkgs,
lib,
inputs,
system,
config,
...
}:
let
@ -40,6 +36,12 @@ in
};
};
services.journald.extraConfig = ''
SystemMaxUse=10G
SystemKeepFree=100M
MaxFileSec=1month
'';
imports = [
./common
./home

28
system/dev/dn-server/network/services.nix
View file

@ -392,11 +392,21 @@ in
"10.0.0.0/24"
"192.168.100.0/24"
];
dns.port = 5300;
yaml-settings = {
webservice.webserver = true;
};
};
dnsdist = {
enable = true;
extraConfig = ''
newServer("127.0.0.1:${toString config.services.pdns-recursor.dns.port}")
addDOHLocal("0.0.0.0:8053", nil, nil, "/", { reusePort = true })
getPool(""):setCache(newPacketCache(65535, {maxTTL=86400, minTTL=0, temporaryFailureTTL=60, staleTTL=60, dontAge=false}))
'';
};
powerdns-admin = {
enable = true;
secretKeyFile = config.sops.secrets."powerdns-admin/secret".path;
@ -457,13 +467,29 @@ in
};
services.nginx.virtualHosts = {
"dns.${config.networking.domain}" = {
enableACME = true;
forceSSL = true;
locations."/dns-query" = {
extraConfig = ''
grpc_pass grpc://127.0.0.1:${toString 8053};
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range;
'';
};
};
"powerdns.${config.networking.domain}" = {
enableACME = true;
forceSSL = true;
locations."/api".proxyPass = "http://127.0.0.1:8081";
locations."/".proxyPass = "http://127.0.0.1:8000";
};
"uptime.${config.networking.domain}" = {
enableACME = true;
forceSSL = true;