···

       
106
       
106
       
 
       
              {

     

       
107
       
107
       
 
       
                name = ".";

     

       
108
       
108
       
 
       
                forward-addr = [

     

       
109
       
109
       
-
       
                  (lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv6.addresses).address

     

       
110
       
110
       
-
       
                  (lib.head nodes.authoritative.config.networking.interfaces.eth1.ipv4.addresses).address

     

       
109
       
109
       
+
       
                  (lib.head nodes.authoritative.networking.interfaces.eth1.ipv6.addresses).address

     

       
110
       
110
       
+
       
                  (lib.head nodes.authoritative.networking.interfaces.eth1.ipv4.addresses).address

     

       
111
       
111
       
 
       
                ];

     

       
112
       
112
       
 
       
              }

     

       
113
       
113
       
 
       
            ];

     
···

       
168
       
168
       
 
       
          "unbound-extra1.conf".text = ''

     

       
169
       
169
       
 
       
            forward-zone:

     

       
170
       
170
       
 
       
            name: "example.local."

     

       
171
       
171
       
-
       
            forward-addr: ${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv6.addresses).address}

     

       
172
       
172
       
-
       
            forward-addr: ${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv4.addresses).address}

     

       
171
       
171
       
+
       
            forward-addr: ${(lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address}

     

       
172
       
172
       
+
       
            forward-addr: ${(lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address}

     

       
173
       
173
       
 
       
          '';

     

       
174
       
174
       
 
       
          "unbound-extra2.conf".text = ''

     

       
175
       
175
       
 
       
            auth-zone:

     
···

       
187
       
187
       
 
       
      client = { lib, nodes, ... }: {

     

       
188
       
188
       
 
       
        imports = [ common ];

     

       
189
       
189
       
 
       
        networking.nameservers = [

     

       
190
       
190
       
-
       
          (lib.head nodes.resolver.config.networking.interfaces.eth1.ipv6.addresses).address

     

       
191
       
191
       
-
       
          (lib.head nodes.resolver.config.networking.interfaces.eth1.ipv4.addresses).address

     

       
190
       
190
       
+
       
          (lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address

     

       
191
       
191
       
+
       
          (lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address

     

       
192
       
192
       
 
       
        ];

     

       
193
       
193
       
 
       
        networking.interfaces.eth1.ipv4.addresses = [

     

       
194
       
194
       
 
       
          { address = "192.168.0.10"; prefixLength = 24; }

     
···

       
276
       
276
       
 
       
      resolver.wait_for_unit("multi-user.target")

     

       
277
       
277
       
 
       


     

       
278
       
278
       
 
       
      with subtest("client should be able to query the resolver"):

     

       
279
       
279
       
-
       
          test(client, ["${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv6.addresses).address}", "${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv4.addresses).address}"], doh=True)

     

       
279
       
279
       
+
       
          test(client, ["${(lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address}", "${(lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address}"], doh=True)

     

       
280
       
280
       
 
       


     

       
281
       
281
       
 
       
      # discard the client we do not need anymore

     

       
282
       
282
       
 
       
      client.shutdown()

     
···

       
298
       
298
       
 
       
          ).strip()

     

       
299
       
299
       
 
       


     

       
300
       
300
       
 
       
          # Thank you black! Can't really break this line into a readable version.

     

       
301
       
301
       
-
       
          expected = "example.local. IN forward ${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv6.addresses).address} ${(lib.head nodes.resolver.config.networking.interfaces.eth1.ipv4.addresses).address}"

     

       
301
       
301
       
+
       
          expected = "example.local. IN forward ${(lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address} ${(lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address}"

     

       
302
       
302
       
 
       
          assert out == expected, f"Expected `{expected}` but got `{out}` instead."

     

       
303
       
303
       
 
       
          local_resolver.fail("sudo -u unauthorizeduser -- unbound-control list_forwards")

     

       
304
       
304