commit 8e93f353cc26904b4ba7c128536014aaf6df4a5c · pyrox.dev/nixpkgs

+58 -64
nixos/tests/knot.nix
···

       60
       60
        
             services.knot.enable = true;

     

       61
       61
        
             services.knot.extraArgs = [ "-v" ];

     

       62
       62
        
             services.knot.keyFiles = [ tsigFile ];

     

       63
       63
       -
             services.knot.extraConfig = ''

     

       64
       64
       -
               server:

     

       65
       65
       -
                   listen: 0.0.0.0@53

     

       66
       66
       -
                   listen: ::@53

     

       67
       67
       -
                   automatic-acl: true

     

       63
       63
       +
             services.knot.settings = {

     

       64
       64
       +
               server = {

     

       65
       65
       +
                 listen = [

     

       66
       66
       +
                   "0.0.0.0@53"

     

       67
       67
       +
                   "::@53"

     

       68
       68
       +
                  ];

     

       69
       69
       +
                 automatic-acl = true;

     

       70
       70
       +
               };

     

       68
       71
        
       

     

       69
       69
       -
               remote:

     

       70
       70
       -
                 - id: secondary

     

       71
       71
       -
                   address: 192.168.0.2@53

     

       72
       72
       -
                   key: xfr_key

     

       72
       72
       +
               acl.secondary_acl = {

     

       73
       73
       +
                 address = "192.168.0.2";

     

       74
       74
       +
                 key = "xfr_key";

     

       75
       75
       +
                 action = "transfer";

     

       76
       76
       +
               };

     

       73
       77
        
       

     

       74
       74
       -
               template:

     

       75
       75
       -
                 - id: default

     

       76
       76
       -
                   storage: ${knotZonesEnv}

     

       77
       77
       -
                   notify: [secondary]

     

       78
       78
       -
                   dnssec-signing: on

     

       79
       79
       -
                   # Input-only zone files

     

       80
       80
       -
                   # https://www.knot-dns.cz/docs/2.8/html/operation.html#example-3

     

       81
       81
       -
                   # prevents modification of the zonefiles, since the zonefiles are immutable

     

       82
       82
       -
                   zonefile-sync: -1

     

       83
       83
       -
                   zonefile-load: difference

     

       84
       84
       -
                   journal-content: changes

     

       85
       85
       -
                   # move databases below the state directory, because they need to be writable

     

       86
       86
       -
                   journal-db: /var/lib/knot/journal

     

       87
       87
       -
                   kasp-db: /var/lib/knot/kasp

     

       88
       88
       -
                   timer-db: /var/lib/knot/timer

     

       78
       78
       +
               remote.secondary.address = "192.168.0.2@53";

     

       89
       79
        
       

     

       90
       90
       -
               zone:

     

       91
       91
       -
                 - domain: example.com

     

       92
       92
       -
                   file: example.com.zone

     

       80
       80
       +
               template.default = {

     

       81
       81
       +
                 storage = knotZonesEnv;

     

       82
       82
       +
                 notify = [ "secondary" ];

     

       83
       83
       +
                 acl = [ "secondary_acl" ];

     

       84
       84
       +
                 dnssec-signing = true;

     

       85
       85
       +
                 # Input-only zone files

     

       86
       86
       +
                 # https://www.knot-dns.cz/docs/2.8/html/operation.html#example-3

     

       87
       87
       +
                 # prevents modification of the zonefiles, since the zonefiles are immutable

     

       88
       88
       +
                 zonefile-sync = -1;

     

       89
       89
       +
                 zonefile-load = "difference";

     

       90
       90
       +
                 journal-content = "changes";

     

       91
       91
       +
               };

     

       93
       92
        
       

     

       94
       94
       -
                 - domain: sub.example.com

     

       95
       95
       -
                   file: sub.example.com.zone

     

       93
       93
       +
               zone = {

     

       94
       94
       +
                 "example.com".file = "example.com.zone";

     

       95
       95
       +
                 "sub.example.com".file = "sub.example.com.zone";

     

       96
       96
       +
               };

     

       96
       97
        
       

     

       97
       97
       -
               log:

     

       98
       98
       -
                 - target: syslog

     

       99
       99
       -
                   any: info

     

       100
       100
       -
             '';

     

       98
       98
       +
               log.syslog.any = "info";

     

       99
       99
       +
             };

     

       101
       100
        
           };

     

       102
       101
        
       

     

       103
       102
        
           secondary = { lib, ... }: {

     
···

       113
       112
        
             services.knot.enable = true;

     

       114
       113
        
             services.knot.keyFiles = [ tsigFile ];

     

       115
       114
        
             services.knot.extraArgs = [ "-v" ];

     

       116
       116
       -
             services.knot.extraConfig = ''

     

       117
       117
       -
               server:

     

       118
       118
       -
                   listen: 0.0.0.0@53

     

       119
       119
       -
                   listen: ::@53

     

       120
       120
       -
                   automatic-acl: true

     

       115
       115
       +
             services.knot.settings = {

     

       116
       116
       +
               server = {

     

       117
       117
       +
                 listen = [

     

       118
       118
       +
                   "0.0.0.0@53"

     

       119
       119
       +
                   "::@53"

     

       120
       120
       +
                 ];

     

       121
       121
       +
                 automatic-acl = true;

     

       122
       122
       +
               };

     

       121
       123
        
       

     

       122
       122
       -
               remote:

     

       123
       123
       -
                 - id: primary

     

       124
       124
       -
                   address: 192.168.0.1@53

     

       125
       125
       -
                   key: xfr_key

     

       124
       124
       +
               remote.primary = {

     

       125
       125
       +
                 address = "192.168.0.1@53";

     

       126
       126
       +
                 key = "xfr_key";

     

       127
       127
       +
               };

     

       126
       128
        
       

     

       127
       127
       -
               template:

     

       128
       128
       -
                 - id: default

     

       129
       129
       -
                   master: primary

     

       130
       130
       -
                   # zonefileless setup

     

       131
       131
       -
                   # https://www.knot-dns.cz/docs/2.8/html/operation.html#example-2

     

       132
       132
       -
                   zonefile-sync: -1

     

       133
       133
       -
                   zonefile-load: none

     

       134
       134
       -
                   journal-content: all

     

       135
       135
       -
                   # move databases below the state directory, because they need to be writable

     

       136
       136
       -
                   journal-db: /var/lib/knot/journal

     

       137
       137
       -
                   kasp-db: /var/lib/knot/kasp

     

       138
       138
       -
                   timer-db: /var/lib/knot/timer

     

       139
       139
       -
       

     

       140
       140
       -
               zone:

     

       141
       141
       -
                 - domain: example.com

     

       142
       142
       -
                   file: example.com.zone

     

       129
       129
       +
               template.default = {

     

       130
       130
       +
                 master = "primary";

     

       131
       131
       +
                 # zonefileless setup

     

       132
       132
       +
                 # https://www.knot-dns.cz/docs/2.8/html/operation.html#example-2

     

       133
       133
       +
                 zonefile-sync = "-1";

     

       134
       134
       +
                 zonefile-load = "none";

     

       135
       135
       +
                 journal-content = "all";

     

       136
       136
       +
               };

     

       143
       137
        
       

     

       144
       144
       -
                 - domain: sub.example.com

     

       145
       145
       -
                   file: sub.example.com.zone

     

       138
       138
       +
               zone = {

     

       139
       139
       +
                 "example.com".file = "example.com.zone";

     

       140
       140
       +
                 "sub.example.com".file = "sub.example.com.zone";

     

       141
       141
       +
               };

     

       146
       142
        
       

     

       147
       147
       -
               log:

     

       148
       148
       -
                 - target: syslog

     

       149
       149
       -
                   any: info

     

       150
       150
       -
             '';

     

       143
       143
       +
               log.syslog.any = "info";

     

       144
       144
       +
             };

     

       151
       145
        
           };

     

       152
       146
        
           client = { lib, nodes, ... }: {

     

       153
       147
        
             imports = [ common ];