nixos/hosts/architect/dns.nix

56 lines
1.2 KiB
Nix
Raw Normal View History

2021-08-23 19:01:35 +01:00
{ config, pkgs, lib, ... }:
2021-08-23 19:00:19 +01:00
2023-02-11 02:29:48 +00:00
let
2023-05-28 05:22:56 +01:00
adguard_dns_port = 5300;
domain = "adguard.architect.devs.giugl.io";
utilities = import ./utilities.nix { inherit lib config; };
inherit (utilities) architectInterfaceAddress;
2022-07-06 19:34:12 +01:00
in
2021-08-23 19:00:19 +01:00
{
architect.firewall.openUDPVPN = [ 53 ];
2023-05-28 05:22:56 +01:00
networking.extraHosts = ''
${architectInterfaceAddress "lan"} ${domain}
${architectInterfaceAddress "wireguard"} ${domain}
${architectInterfaceAddress "tailscale"} ${domain}
'';
2021-08-23 19:00:19 +01:00
services = {
2023-05-28 05:22:56 +01:00
nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
extraConfig = ''
allow ${config.architect.networks.lan.net};
allow ${config.architect.networks.tailscale.net};
deny all;
'';
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.adguardhome.port}";
};
};
2021-08-23 19:01:35 +01:00
dnsmasq = {
2021-11-25 11:42:32 +00:00
enable = true;
2022-07-06 19:34:12 +01:00
# adguard port
2023-05-28 05:22:56 +01:00
servers = [ "127.0.0.1#${toString adguard_dns_port}" ];
2021-08-23 19:01:35 +01:00
extraConfig = ''
2021-09-07 10:23:56 +01:00
localise-queries
min-cache-ttl=120
max-cache-ttl=2400
2023-05-01 05:31:48 +01:00
domain=runas.rocks
domain=giugl.io
domain=devs.runas.rocks
domain=devs.giugl.io
2021-08-23 19:01:35 +01:00
'';
};
2021-08-23 19:00:19 +01:00
2021-09-25 17:22:18 +01:00
adguardhome = {
2021-11-25 11:42:32 +00:00
enable = true;
2023-05-28 05:22:56 +01:00
port = 5353;
2021-08-23 19:00:19 +01:00
};
2021-08-23 19:01:35 +01:00
};
2021-08-23 19:00:19 +01:00
}