commit c05cc13f769ecfabc7e13ec32d4ef4789d9a64be · pyrox.dev/nixpkgs

+14 -4
nixos/modules/services/networking/bind.nix
···

       6
       6
        
       

     

       7
       7
        
         cfg = config.services.bind;

     

       8
       8
        
       

     

       9
       9
       +
         bindPkg = config.services.bind.package;

     

       10
       10
       +
       

     

       9
       11
        
         bindUser = "named";

     

       10
       12
        
       

     

       11
       13
        
         bindZoneCoerce = list: builtins.listToAttrs (lib.forEach list (zone: { name = zone.name; value = zone; }));

     
···

       103
       105
        
           services.bind = {

     

       104
       106
        
       

     

       105
       107
        
             enable = mkEnableOption "BIND domain name server";

     

       108
       108
       +
       

     

       109
       109
       +
       

     

       110
       110
       +
             package = mkOption {

     

       111
       111
       +
               type = types.package;

     

       112
       112
       +
               default = pkgs.bind;

     

       113
       113
       +
               defaultText = "pkgs.bind";

     

       114
       114
       +
               description = "The BIND package to use.";

     

       115
       115
       +
             };

     

       106
       116
        
       

     

       107
       117
        
             cacheNetworks = mkOption {

     

       108
       118
        
               default = [ "127.0.0.0/24" ];

     
···

       225
       235
        
             preStart = ''

     

       226
       236
        
               mkdir -m 0755 -p /etc/bind

     

       227
       237
        
               if ! [ -f "/etc/bind/rndc.key" ]; then

     

       228
       228
       -
                 ${pkgs.bind.out}/sbin/rndc-confgen -c /etc/bind/rndc.key -u ${bindUser} -a -A hmac-sha256 2>/dev/null

     

       238
       238
       +
                 ${bindPkg.out}/sbin/rndc-confgen -c /etc/bind/rndc.key -u ${bindUser} -a -A hmac-sha256 2>/dev/null

     

       229
       239
        
               fi

     

       230
       240
        
       

     

       231
       241
        
               ${pkgs.coreutils}/bin/mkdir -p /run/named

     
···

       233
       243
        
             '';

     

       234
       244
        
       

     

       235
       245
        
             serviceConfig = {

     

       236
       236
       -
               ExecStart = "${pkgs.bind.out}/sbin/named -u ${bindUser} ${optionalString cfg.ipv4Only "-4"} -c ${cfg.configFile} -f";

     

       237
       237
       -
               ExecReload = "${pkgs.bind.out}/sbin/rndc -k '/etc/bind/rndc.key' reload";

     

       238
       238
       -
               ExecStop = "${pkgs.bind.out}/sbin/rndc -k '/etc/bind/rndc.key' stop";

     

       246
       246
       +
               ExecStart = "${bindPkg.out}/sbin/named -u ${bindUser} ${optionalString cfg.ipv4Only "-4"} -c ${cfg.configFile} -f";

     

       247
       247
       +
               ExecReload = "${bindPkg.out}/sbin/rndc -k '/etc/bind/rndc.key' reload";

     

       248
       248
       +
               ExecStop = "${bindPkg.out}/sbin/rndc -k '/etc/bind/rndc.key' stop";

     

       239
       249
        
             };

     

       240
       250
        
       

     

       241
       251
        
             unitConfig.Documentation = "man:named(8)";