nixos-servers/nixos/modules/networking/dmz/dnsmasq.nix
Pim Kunis 76501362f7 parameterize main nic and dmz bridge interface names
firewall some services to particular interfaces
2024-01-13 00:05:25 +01:00

42 lines
843 B
Nix

{ config, ... }:
let
inherit (config.lab.networking) publicIPv4 dockerSwarmInternalIPv4 dmzDHCPIPv4 dmzRouterIPv4;
in
{
no-resolv = true;
local = "/dmz/";
dhcp-fqdn = true;
no-hosts = true;
expand-hosts = true;
domain = "dmz";
dhcp-authoritative = true;
ra-param = "*,0,0";
alias = "${publicIPv4},${dockerSwarmInternalIPv4}";
log-dhcp = true;
log-queries = true;
port = "5353";
server = [
dmzRouterIPv4
"/geokunis2.nl/${dmzDHCPIPv4}"
"/kun.is/${dmzDHCPIPv4}"
];
dhcp-range = [
"192.168.30.50,192.168.30.127,15m"
];
dhcp-host = [
"b8:27:eb:b9:ab:e2,esrom"
"ca:fe:c0:ff:ee:08,maestro,${dockerSwarmInternalIPv4}"
];
dhcp-option = [
"3,${dmzRouterIPv4}"
"option:dns-server,${dmzRouterIPv4}"
];
address = [
"/ns.pizzapim.nl/ns.geokunis2.nl/${dmzDHCPIPv4}"
];
}