chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use local as vpn tld

Browse source
This commit is contained in:
Charlotte Van Petegem 2022-11-19 11:13:37 +01:00
parent 434cebc7e8
commit ff486be76f
No known key found for this signature in database
GPG key ID: 019E764B7184435A
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/base/network/wireguard.nix
View file

@ -51,9 +51,10 @@ in
"127.0.0.0/8 allow" "127.0.0.0/8 allow"
"10.240.0.0/24 allow" "10.240.0.0/24 allow"
]; ];
private-domain = "vpn"; private-domain = "local";
local-zone = builtins.map (name: ''"${name}.vpn" redirect'') (builtins.attrNames data); domain-insecure = "local";
local-data = builtins.map (name: ''"${name}.vpn IN A ${data.${name}.ip}"'') (builtins.attrNames data); local-zone = builtins.map (name: ''"${name}.local" redirect'') (builtins.attrNames data);
local-data = builtins.map (name: ''"${name}.local IN A ${data.${name}.ip}"'') (builtins.attrNames data);
}; };
forward-zone = { forward-zone = {
name = ''"."''; name = ''"."'';
@ -107,7 +108,7 @@ in
enable = true; enable = true;
name = "wg0"; name = "wg0";
address = [ "${data.${config.networking.hostName}.ip}/32" ]; address = [ "${data.${config.networking.hostName}.ip}/32" ];
domains = [ "vpn" ]; domains = [ "local" ];
dns = [ data.lasting-integrity.ip ]; dns = [ data.lasting-integrity.ip ];
routes = [{ routes = [{
routeConfig = routeConfig =