ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add media dns split

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-10-09 16:29:11 -05:00
parent 58348b3c83
commit 645300b0e4
1 changed files with 16 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

36
hosts/h003/mods/networking.nix
View file

@ -110,9 +110,17 @@
}; };
vlan10 = { vlan10 = {
# Block all WAN allowedTCPPorts = [
allowedTCPPorts = [ ]; 22 # SSH (for remote admin access)
allowedUDPPorts = [ ]; 53 # DNS
80
443 # HTTP
];
allowedUDPPorts = [
53 # DNS
67 # DHCP server
68
];
}; };
# LAN interface (VLAN 20) - FULL SERVICE # LAN interface (VLAN 20) - FULL SERVICE
@ -129,21 +137,6 @@
68 # DHCP client responses 68 # DHCP client responses
]; ];
}; };
# NOTE check this...
vlan10 = {
allowedTCPPorts = [
22 # SSH (for remote admin access)
53 # DNS
80
443 # HTTP
];
allowedUDPPorts = [
53 # DNS
67 # DHCP server
68
];
};
}; };
}; };
@ -164,8 +157,8 @@
settings = { settings = {
# Listen only on LAN interface # Listen only on LAN interface
interface = [ interface = [
"vlan20"
"vlan10" "vlan10"
"vlan20"
]; ];
bind-interfaces = true; bind-interfaces = true;
@ -174,6 +167,9 @@
# Note in Ad GuardHome in DNS Settings add localhost:9053 to Private reverse DNS servers and enable them # Note in Ad GuardHome in DNS Settings add localhost:9053 to Private reverse DNS servers and enable them
listen-address = "127.0.0.1"; listen-address = "127.0.0.1";
port = 9053; port = 9053;
host-record = [
"media.joshuabell.xyz,10.12.14.10"
];
# DHCP range and settings # DHCP range and settings
dhcp-range = [ dhcp-range = [
@ -206,8 +202,8 @@
enable-ra = lib.mkIf config.networking.enableIPv6 true; enable-ra = lib.mkIf config.networking.enableIPv6 true;
# interface, min interval, max interval # interface, min interval, max interval
ra-param = lib.mkIf config.networking.enableIPv6 [ ra-param = lib.mkIf config.networking.enableIPv6 [
"vlan20,60,120"
"vlan10,60,120" "vlan10,60,120"
"vlan20,60,120"
]; ];
# DNS settings (not needed since we use adguard for dns) # DNS settings (not needed since we use adguard for dns)