kiara/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity

Split nameservers between IPv4 and IPv6 (#420)

Browse source 
Reviewed-on: Fediversity/Fediversity#420
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
This commit is contained in:
Nicolas Jeannerod 2025-07-01 13:09:06 +02:00 • committed by Nicolas Jeannerod
parent 5a3cbe4d83
commit c1dc0fef01
1 changed files with 10 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
infra/common/nixos/networking.nix
View file

@ -21,13 +21,8 @@ in
## REVIEW: Do we actually need that, considering that we have static IPs? ## REVIEW: Do we actually need that, considering that we have static IPs?
useDHCP = mkDefault true; useDHCP = mkDefault true;
nameservers = [ ## Disable the default firewall and use nftables instead, with a custom
"95.215.185.6" ## Procolix-made ruleset.
"95.215.185.7"
"2a00:51c0::5fd7:b906"
"2a00:51c0::5fd7:b907"
];
firewall.enable = false; firewall.enable = false;
nftables = { nftables = {
enable = true; enable = true;
@ -44,6 +39,10 @@ in
address = config.fediversityVm.ipv4.gateway; address = config.fediversityVm.ipv4.gateway;
interface = config.fediversityVm.ipv4.interface; interface = config.fediversityVm.ipv4.interface;
}; };
nameservers = [
"95.215.185.6"
"95.215.185.7"
];
}) })
## IPv6 ## IPv6
@ -55,6 +54,10 @@ in
address = config.fediversityVm.ipv6.gateway; address = config.fediversityVm.ipv6.gateway;
interface = config.fediversityVm.ipv6.interface; interface = config.fediversityVm.ipv6.interface;
}; };
nameservers = [
"2a00:51c0::5fd7:b906"
"2a00:51c0::5fd7:b907"
];
}) })
]; ];
}; };