diff options
| author | Alex Auvolat <alex@adnab.me> | 2022-08-30 15:52:42 +0200 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2022-08-30 15:52:42 +0200 |
| commit | 6ec9aad801e1d87d0be9d795da1b3ba7883c32cd (patch) | |
| tree | 2ba9b0d47a62b2c5bc850a558be0140df31cbee0 /cluster/prod/app/secretmgr.py | |
| parent | e81716e41eac813e12824e028ec72c3daeb57588 (diff) | |
| download | nixcfg-6ec9aad801e1d87d0be9d795da1b3ba7883c32cd.tar.gz nixcfg-6ec9aad801e1d87d0be9d795da1b3ba7883c32cd.zip | |
Improve DNS configuration
Add Unbound server that separates queries between those going to Consul
and those going elsewhere. This allows us to have DNS working even if
Consul fails for some reason. This way we can also remove the secondary
`nameserver` entry in /etc/resolv.conf, thus fixing a bug where certain
containers (Alpine-based images?) were using the secondary resolver some
of the time, making them unable to access .consul hosts.
Diffstat (limited to 'cluster/prod/app/secretmgr.py')
0 files changed, 0 insertions, 0 deletions