public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

stubby: configure cache directory

Browse Source 
This is needed for local dnssec validation
This commit is contained in:
Jörg Thalheim 2020-02-24 10:51:43 +00:00
parent 56e6074c07
commit 8cfd003295
No known key found for this signature in database
GPG Key ID: 003F2096411B5F92
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/networking/stubby.nix
View File

@ -72,6 +72,7 @@ let
resolution_type: GETDNS_RESOLUTION_STUB resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list: dns_transport_list:
${fallbacks} ${fallbacks}
appdata_dir: "/var/cache/stubby"
tls_authentication: ${cfg.authenticationMode} tls_authentication: ${cfg.authenticationMode}
tls_query_padding_blocksize: ${toString cfg.queryPaddingBlocksize} tls_query_padding_blocksize: ${toString cfg.queryPaddingBlocksize}
edns_client_subnet_private: ${if cfg.subnetPrivate then "1" else "0"} edns_client_subnet_private: ${if cfg.subnetPrivate then "1" else "0"}
@ -208,6 +209,7 @@ in
CapabilityBoundingSet = "CAP_NET_BIND_SERVICE"; CapabilityBoundingSet = "CAP_NET_BIND_SERVICE";
ExecStart = "${pkgs.stubby}/bin/stubby -C ${confFile} ${optionalString cfg.debugLogging "-l"}"; ExecStart = "${pkgs.stubby}/bin/stubby -C ${confFile} ${optionalString cfg.debugLogging "-l"}";
DynamicUser = true; DynamicUser = true;
CacheDirectory = "stubby";
}; };
}; };
}; };