feat: add unique CoreDNS views for each VPN-defined host with forwarding

2025-04-22 16:30:32 +01:00 · 2025-04-22 16:30:32 +01:00 · f3dfa9543e
commit f3dfa9543e
parent 6a21b5b40a
1 changed files with 13 additions and 0 deletions
--- a/hosts/architect/dns.nix
+++ b/hosts/architect/dns.nix
@ -11,6 +11,18 @@ let
            let
              architectIP = config.architect.networks.${iface}.devices.architect.address;
              interfaceNet = config.architect.networks.${iface}.net;
+              deviceViews = concatMapStrings (deviceName: device:
+                let
+                  deviceIP = device.address;
+                in
+                ''
+                  view ${deviceName} {
+                    expr client_ip() == '${deviceIP}'
+
+                    forward . 8.8.8.8
+                  }
+                ''
+              ) (builtins.attrValues config.architect.networks.${iface}.devices);
            in
            ''
              ${domain} {
@ -29,6 +41,7 @@ let
                cache
                log
              }
+              ${deviceViews}
            ''
          )
          conf.dnsInterfaces;