commit 52525af4aaaae9c428aab6113e0fc49e41f8a0be · pyrox.dev/nixpkgs

+20 -3
nixos/modules/services/networking/kresd.nix
···

       68
       68
        
             description = ''

     

       69
       69
        
               Whether to enable knot-resolver domain name server.

     

       70
       70
        
               DNSSEC validation is turned on by default.

     

       71
       71
       -
               You can run `sudo nc -U /run/knot-resolver/control/1`

     

       72
       72
       -
               and give commands interactively to kresd@1.service.

     

       71
       71
       +
               You can run `kresd-cli 1` and give commands interactively to kresd@1.service.

     

       73
       72
        
             '';

     

       74
       73
        
           };

     

       75
       74
        
           package = lib.mkPackageOption pkgs "knot-resolver" {

     
···

       135
       134
        
       

     

       136
       135
        
         ###### implementation

     

       137
       136
        
         config = lib.mkIf cfg.enable {

     

       138
       138
       -
           environment.etc."knot-resolver/kresd.conf".source = configFile; # not required

     

       137
       137
       +
           environment = {

     

       138
       138
       +
             etc."knot-resolver/kresd.conf".source = configFile; # not required

     

       139
       139
       +
             systemPackages = [

     

       140
       140
       +
               (pkgs.writeShellScriptBin "kresd-cli" ''

     

       141
       141
       +
                 if [[ ''${1:-} == -h || ''${1:-} == --help ]]; then

     

       142
       142
       +
                   echo "Usage: $0 [X]"

     

       143
       143
       +
                   echo

     

       144
       144
       +
                   echo "  X is number of the control socket and corresponds to the number of the template unit."

     

       145
       145
       +
                   exit

     

       146
       146
       +
                 fi

     

       147
       147
       +
       

     

       148
       148
       +
                 exec=exec

     

       149
       149
       +
                 if [[ "$USER" != knot-resolver ]]; then

     

       150
       150
       +
                   exec='exec /run/wrappers/bin/sudo -u knot-resolver'

     

       151
       151
       +
                 fi

     

       152
       152
       +
                 $exec ${lib.getExe pkgs.socat} - /run/knot-resolver/control/''${1:-1}

     

       153
       153
       +
               '')

     

       154
       154
       +
             ];

     

       155
       155
       +
           };

     

       139
       156
        
       

     

       140
       157
        
           networking.resolvconf.useLocalResolver = lib.mkDefault true;

     

       141
       158