diff options
author | Marc 'risson' Schmitt <marc.schmitt@risson.space> | 2021-05-28 22:12:47 +0200 |
---|---|---|
committer | Marc 'risson' Schmitt <marc.schmitt@risson.space> | 2021-05-29 18:00:44 +0200 |
commit | 6b12cff0b5746af364066d1bcb2bc2563e978aa8 (patch) | |
tree | e39cb40c5eabaa3114ce7980cf11e6159d3829c9 | |
parent | 190d0579fbb13e83756dc2e6df49a3b9221fbfa9 (diff) | |
download | nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar.gz nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar.bz2 nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar.lz nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar.xz nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.tar.zst nixpkgs-6b12cff0b5746af364066d1bcb2bc2563e978aa8.zip |
nixos/unbound: fix define-tag option
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
-rw-r--r-- | nixos/modules/services/networking/unbound.nix | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/unbound.nix b/nixos/modules/services/networking/unbound.nix index 09aef9a1dcf..6d7178047ea 100644 --- a/nixos/modules/services/networking/unbound.nix +++ b/nixos/modules/services/networking/unbound.nix @@ -21,7 +21,15 @@ let )) else throw (traceSeq v "services.unbound.settings: unexpected type"); - confFile = pkgs.writeText "unbound.conf" (concatStringsSep "\n" ((mapAttrsToList (toConf "") cfg.settings) ++ [""])); + confNoServer = concatStringsSep "\n" ((mapAttrsToList (toConf "") (builtins.removeAttrs cfg.settings [ "server" ])) ++ [""]); + confServer = concatStringsSep "\n" (mapAttrsToList (toConf " ") (builtins.removeAttrs cfg.settings.server [ "define-tag" ])); + + confFile = pkgs.writeText "unbound.conf" '' + server: + ${optionalString (cfg.settings.server.define-tag != "") (toOption " " "define-tag" cfg.settings.server.define-tag)} + ${confServer} + ${confNoServer} + ''; rootTrustAnchorFile = "${cfg.stateDir}/root.key"; @@ -170,6 +178,7 @@ in { # prevent race conditions on system startup when interfaces are not yet # configured ip-freebind = mkDefault true; + define-tag = mkDefault ""; }; remote-control = { control-enable = mkDefault false; |