refactor(dns): simplify DNS config and associate architect domain to every interface

This commit is contained in:
Giulio De Pasquale 2024-10-07 12:09:12 +01:00
parent e10d9a4d5a
commit 74efccbdb6

View File

@ -1,44 +1,52 @@
{ config, lib, ... }: { config, lib, ... }:
let with lib;
# Function to generate CoreDNS config for a single vhost
generateCoreDNSConfigForVhost = domain: conf:
let
# Retrieve architect's IP on each interface
interfaceConfigs = builtins.map
(iface:
let
architectIP = config.architect.networks.${iface}.devices.architect.address;
interfaceNet = config.architect.networks.${iface}.net;
in
''
${domain} {
view ${iface} {
expr incidr(client_ip(), '${interfaceNet}')
}
template IN A ${domain} { let
answer "${domain}. 60 IN A ${architectIP}" generateCoreDNSConfig = domains:
let
generateForDomain = domain: conf:
concatMapStrings
(iface:
let
architectIP = config.architect.networks.${iface}.devices.architect.address;
interfaceNet = config.architect.networks.${iface}.net;
in
''
${domain} {
view ${iface} {
expr incidr(client_ip(), '${interfaceNet}')
}
template IN A ${domain} {
answer "${domain}. 60 IN A ${architectIP}"
}
template IN HTTPS ${domain} {
answer "${domain}. 60 IN HTTPS 1 . ipv4hint=\"${architectIP}\""
}
cache
log
} }
template IN HTTPS ${domain} { ''
answer "${domain}. 60 IN HTTPS 1 . ipv4hint=\"${architectIP}\"" )
} conf.dnsInterfaces;
cache
log
}
''
)
conf.dnsInterfaces;
in in
lib.concatStringsSep "\n" interfaceConfigs; concatStrings (mapAttrsToList generateForDomain domains);
# Combine vhosts and the single domain
allDomains = config.architect.vhost // {
"architect.devs.giugl.io" = { dnsInterfaces = [ "lan" "tailscale" ]; };
};
in in
{ {
services = { services = {
coredns = { coredns = {
enable = true; enable = true;
config = '' config = ''
${lib.concatStringsSep "\n" (lib.mapAttrsToList generateCoreDNSConfigForVhost config.architect.vhost)} ${generateCoreDNSConfig allDomains}
. { . {
cache cache
forward . 127.0.0.1:${toString config.services.adguardhome.settings.dns.port} forward . 127.0.0.1:${toString config.services.adguardhome.settings.dns.port}