B4L/cnx-network-clan
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add authoritative DNS on ns1/ns2 and finalize clan config

Browse Source 
- Knot authoritative DNS: ns1 primary, ns2 secondary serving cnx.network,
  buildfor.life and cnx.email over TSIG-secured zone transfer (modules/dns)
- Knot listens publicly + over ZeroTier; firewall opens port 53
- Complete clan inventory: name/domain, admin SSH key, control as the
  zerotier controller, tor on all nixos machines
- Enable age yubikey/fido2-hmac secret plugins
This commit is contained in:
Berwn
2026-06-14 13:24:23 +07:00
parent 9f1a2861ce
commit 807785cdab
9 changed files with 146 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/dns/domains.nix
+7
View File
@@ -0,0 +1,7 @@
# Public zones served authoritatively by ns1 (primary) and ns2 (secondary).
# Add a domain here AND drop a matching <domain>.zone file in ./zones/.
[
"cnx.network"
"buildfor.life"
"cnx.email"
]