Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix unbound for local traffic

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-11-28 20:48:21 +01:00
parent da256dadaa
commit 885660c4e4
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -20,7 +20,7 @@
type filter hook input priority filter; policy drop; type filter hook input priority filter; policy drop;
# accept any localhost traffic # accept any localhost traffic
iif lo accept iifname lo accept
# Allow trusted networks to access the router # Allow trusted networks to access the router
iifname { iifname {

2
hosts/fw.cloonar.com/modules/unbound.nix
View File

@@ -3,7 +3,7 @@
enable = true; enable = true;
settings = { settings = {
server = { server = {
interface = [ "10.42.96.1" "10.42.97.1" "10.42.99.1" "10.42.254.1" ]; interface = [ "127.0.0.1" "10.42.96.1" "10.42.97.1" "10.42.99.1" "10.42.254.1" ];
# tls-cert-bundle = "/var/lib/acme/fw.cloonar.com/fullchain.pem"; # tls-cert-bundle = "/var/lib/acme/fw.cloonar.com/fullchain.pem";
}; };
# local-zone = "cloonar.com transparent"; # local-zone = "cloonar.com transparent";