diff options
| author | David Duarte <deltaduartedavid@gmail.com> | 2019-03-01 10:10:44 +0100 |
|---|---|---|
| committer | Danylo Hlynskyi <abcz2.uprola@gmail.com> | 2019-03-01 11:10:44 +0200 |
| commit | b381c27b589c3b03d9c281b2e4fcae9c887ea72b (patch) | |
| tree | ac8e56738edcc2ab5cdd686f0d6594335b4c7798 /nixos | |
| parent | 3944fa41a05f5334ec1f9d5405bfab863b9ba6f2 (diff) | |
| download | nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar.gz nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar.bz2 nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar.lz nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar.xz nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.tar.zst nixpkgs-b381c27b589c3b03d9c281b2e4fcae9c887ea72b.zip | |
nixos/coredns: init (#54931)
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/module-list.nix | 1 | ||||
| -rw-r--r-- | nixos/modules/services/networking/coredns.nix | 50 |
2 files changed, 51 insertions, 0 deletions
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix index 32b3f14e82d..031a1d52e79 100644 --- a/nixos/modules/module-list.nix +++ b/nixos/modules/module-list.nix @@ -528,6 +528,7 @@ ./services/networking/cntlm.nix ./services/networking/connman.nix ./services/networking/consul.nix + ./services/networking/coredns.nix ./services/networking/coturn.nix ./services/networking/dante.nix ./services/networking/ddclient.nix diff --git a/nixos/modules/services/networking/coredns.nix b/nixos/modules/services/networking/coredns.nix new file mode 100644 index 00000000000..afb2b547a46 --- /dev/null +++ b/nixos/modules/services/networking/coredns.nix @@ -0,0 +1,50 @@ +{ config, lib, pkgs, ... }: + +with lib; + +let + cfg = config.services.coredns; + configFile = pkgs.writeText "Corefile" cfg.config; +in { + options.services.coredns = { + enable = mkEnableOption "Coredns dns server"; + + config = mkOption { + default = ""; + example = '' + . { + whoami + } + ''; + type = types.lines; + description = "Verbatim Corefile to use. See <link xlink:href=\"https://coredns.io/manual/toc/#configuration\"/> for details."; + }; + + package = mkOption { + default = pkgs.coredns; + defaultText = "pkgs.coredns"; + type = types.package; + description = "Coredns package to use."; + }; + }; + + config = mkIf cfg.enable { + systemd.services.coredns = { + description = "Coredns dns server"; + after = [ "network.target" ]; + wantedBy = [ "multi-user.target" ]; + serviceConfig = { + PermissionsStartOnly = true; + LimitNPROC = 512; + LimitNOFILE = 1048576; + CapabilityBoundingSet = "cap_net_bind_service"; + AmbientCapabilities = "cap_net_bind_service"; + NoNewPrivileges = true; + DynamicUser = true; + ExecStart = "${getBin cfg.package}/bin/coredns -conf=${configFile}"; + ExecReload = "${pkgs.coreutils}/bin/kill -SIGUSR1 $MAINPID"; + Restart = "on-failure"; + }; + }; + }; +} |