cnx-network-clan/modules/dns/domains.nix at main - cnx-network-clan - B4L Gitea

B4L/cnx-network-clan

Files

T

Berwn 807785cdab Add authoritative DNS on ns1/ns2 and finalize clan config

- Knot authoritative DNS: ns1 primary, ns2 secondary serving cnx.network,
  buildfor.life and cnx.email over TSIG-secured zone transfer (modules/dns)
- Knot listens publicly + over ZeroTier; firewall opens port 53
- Complete clan inventory: name/domain, admin SSH key, control as the
  zerotier controller, tor on all nixos machines
- Enable age yubikey/fido2-hmac secret plugins

2026-06-14 13:24:23 +07:00

8 lines

200 B

Nix

Raw Permalink Blame History

 # Public zones served authoritatively by ns1 (primary) and ns2 (secondary).
 # Add a domain here AND drop a matching <domain>.zone file in ./zones/.
 [
   "cnx.network"
   "buildfor.life"
   "cnx.email"
 ]