diff options
author | rnhmjoj <rnhmjoj@inventati.org> | 2019-03-24 11:41:45 +0100 |
---|---|---|
committer | rnhmjoj <rnhmjoj@inventati.org> | 2019-08-27 14:42:06 +0200 |
commit | 05ddde928defd3df444bf6149b5fe98e4a6a4fde (patch) | |
tree | 4b4da7cca7c924926f85f5e6db593948168e5843 /nixos | |
parent | 210756a450e7c6c4f1ad8f8934de0d5e267e8d4e (diff) | |
download | nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar.gz nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar.bz2 nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar.lz nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar.xz nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.tar.zst nixpkgs-05ddde928defd3df444bf6149b5fe98e4a6a4fde.zip |
nixos/dnschain: disable DNSSEC for namecoin TLDs
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/networking/dnschain.nix | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/nixos/modules/services/networking/dnschain.nix b/nixos/modules/services/networking/dnschain.nix index 0c2add424ba..5b58ea9b0c9 100644 --- a/nixos/modules/services/networking/dnschain.nix +++ b/nixos/modules/services/networking/dnschain.nix @@ -136,10 +136,16 @@ in "/.dns/127.0.0.1#${toString cfg.dns.port}" ]; - services.pdns-recursor.forwardZones = mkIf cfgs.pdns-recursor.resolveDNSChainQueries - { bit = "127.0.0.1:${toString cfg.dns.port}"; - dns = "127.0.0.1:${toString cfg.dns.port}"; - }; + services.pdns-recursor = mkIf cfgs.pdns-recursor.resolveDNSChainQueries { + forwardZones = + { bit = "127.0.0.1:${toString cfg.dns.port}"; + dns = "127.0.0.1:${toString cfg.dns.port}"; + }; + luaConfig ='' + addNTA("bit", "namecoin doesn't support DNSSEC") + addNTA("dns", "namecoin doesn't support DNSSEC") + ''; + }; users.users = singleton { name = username; |