public
/
authoritative-dns
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add dnssec for reverse zones

This commit is contained in:
niten 2023-11-03 13:10:50 -07:00
parent a7ea67fedb
commit aa331b5b48
2 changed files with 26 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
authoritative-dns.nix
View File

@ -102,11 +102,13 @@ in {
inherit (domainCfg) zone; inherit (domainCfg) zone;
}; };
}) cfg.domains; }) cfg.domains;
reverseZones = concatMapAttrs (domain: domainOpts: reverseZones = concatMapAttrs (domain:
{ ksk, zone, ... }:
listToAttrs (map (network: listToAttrs (map (network:
reverseZonefile { reverseZonefile {
inherit domain network; inherit domain network ksk;
inherit (domainOpts.zone) nameservers; inherit (zone) nameservers;
keyFile = ksk.key-file;
ipHostMap = cfg.ip-host-map; ipHostMap = cfg.ip-host-map;
serial = cfg.timestamp; serial = cfg.timestamp;
}) domainOpts.reverse-zones)) cfg.domains; }) domainOpts.reverse-zones)) cfg.domains;

16
reverse-zone.nix
View File

@ -1,7 +1,8 @@
{ pkgs, ... }: { pkgs, ... }:
{ domain, network, nameservers, ipHostMap, serial, zoneTTL ? 10800 { domain, network, nameservers, ipHostMap, serial, keyFile ? null
, refresh ? 3600, retry ? 1800, expire ? 604800, minimum ? 3600 }: , zoneTTL ? 10800, refresh ? 3600, retry ? 1800, expire ? 604800, minimum ? 3600
}:
with pkgs.lib; with pkgs.lib;
let let
@ -47,7 +48,10 @@ let
nameserverEntries = map (nameserver: "@ IN NS ${nameserver}.") nameservers; nameserverEntries = map (nameserver: "@ IN NS ${nameserver}.") nameservers;
in nameValuePair "${getNetworkZoneName network}" '' in nameValuePair "${getNetworkZoneName network}" {
dnssec = keyFile != null;
ksk.keyFile = keyFile;
data = ''
$ORIGIN ${getNetworkZoneName network} $ORIGIN ${getNetworkZoneName network}
$TTL ${toString zoneTTL} $TTL ${toString zoneTTL}
@ IN SOA ${head nameservers}. hostmaster.${domain}. ( @ IN SOA ${head nameservers}. hostmaster.${domain}. (
@ -58,5 +62,7 @@ in nameValuePair "${getNetworkZoneName network}" ''
${toString minimum} ${toString minimum}
) )
${concatStringsSep "\n" nameserverEntries} ${concatStringsSep "\n" nameserverEntries}
${concatStringsSep "\n" (generateReverseZoneEntries network domain ipHostMap)} ${concatStringsSep "\n"
'' (generateReverseZoneEntries network domain ipHostMap)}
'';
}