diff options
author | Quentin Dufour <quentin@deuxfleurs.fr> | 2023-04-28 09:26:32 +0200 |
---|---|---|
committer | Quentin Dufour <quentin@deuxfleurs.fr> | 2023-04-28 09:26:32 +0200 |
commit | 3befdea20669f5b6e09cadb20f91d33a3cded459 (patch) | |
tree | a906f35002194b2727897fd3b4ea9a5d09a00843 /nix/deuxfleurs.nix | |
parent | af82308e8463e34c8f75e469f4d1a5df18f50710 (diff) | |
download | nixcfg-3befdea20669f5b6e09cadb20f91d33a3cded459.tar.gz nixcfg-3befdea20669f5b6e09cadb20f91d33a3cded459.zip |
nix: allow wireguard + logs
Diffstat (limited to 'nix/deuxfleurs.nix')
-rw-r--r-- | nix/deuxfleurs.nix | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix index f7b70d7..ad5249d 100644 --- a/nix/deuxfleurs.nix +++ b/nix/deuxfleurs.nix @@ -201,10 +201,15 @@ in domain-insecure = [ "consul." ]; local-zone = [ "consul. nodefault" ]; log-servfail = true; + verbosity = 1; + log-queries = true; + use-syslog = false; + logfile = "/dev/stdout"; access-control = [ "127.0.0.0/8 allow" "${cfg.lan_ip}/${toString cfg.lan_ip_prefix_length} allow" "172.17.0.0/16 allow" + "10.83.0.0/16 allow" ]; }; forward-zone = [ |