Berwn 56f0af3153 Fix knot startup on ns1/ns2: TSIG key perms and port 53 conflict ...

knotd runs as the "knot" user, so the shared TSIG key file needs
owner/group knot — it was root-only and knot couldn't read it.

systemd-resolved's stub listener was holding port 53, so knot's
0.0.0.0@53 / ::@53 TCP bind failed. Disable the stub (resolution
still works via nss-resolve) to free the port.

2026-06-14 14:49:10 +07:00

machines

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00

modules

Fix knot startup on ns1/ns2: TSIG key perms and port 53 conflict

2026-06-14 14:49:10 +07:00

sops

Add machine ns2 to secrets

2026-06-14 12:20:27 +07:00

vars

Add ns2 to secret vars/shared/dns-tsig/tsig.conf

2026-06-14 13:22:43 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

Initial commit

2026-06-14 12:11:16 +07:00

clan.nix

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00

flake.lock

Initial commit

2026-06-14 12:11:16 +07:00

flake.nix

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00

inventory.json

update(inventory.json): Installed ns2

2026-06-14 13:34:17 +07:00

S

Description

No description provided

550 KiB

Languages

Nix 100%