aboutsummaryrefslogtreecommitdiff
path: root/nix/deuxfleurs.nix
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2023-04-28 09:26:32 +0200
committerQuentin Dufour <quentin@deuxfleurs.fr>2023-04-28 09:26:32 +0200
commit3befdea20669f5b6e09cadb20f91d33a3cded459 (patch)
treea906f35002194b2727897fd3b4ea9a5d09a00843 /nix/deuxfleurs.nix
parentaf82308e8463e34c8f75e469f4d1a5df18f50710 (diff)
downloadnixcfg-3befdea20669f5b6e09cadb20f91d33a3cded459.tar.gz
nixcfg-3befdea20669f5b6e09cadb20f91d33a3cded459.zip
nix: allow wireguard + logs
Diffstat (limited to 'nix/deuxfleurs.nix')
-rw-r--r--nix/deuxfleurs.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index f7b70d7..ad5249d 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -201,10 +201,15 @@ in
domain-insecure = [ "consul." ];
local-zone = [ "consul. nodefault" ];
log-servfail = true;
+ verbosity = 1;
+ log-queries = true;
+ use-syslog = false;
+ logfile = "/dev/stdout";
access-control = [
"127.0.0.0/8 allow"
"${cfg.lan_ip}/${toString cfg.lan_ip_prefix_length} allow"
"172.17.0.0/16 allow"
+ "10.83.0.0/16 allow"
];
};
forward-zone = [