From e29dd8a2283399b7e046937340509d5aec4b52ba Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Wed, 29 Jul 2026 06:54:49 -0500
Subject: changes

---
 modules/networking/nixos/unbound.nix | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 modules/networking/nixos/unbound.nix

(limited to 'modules/networking/nixos/unbound.nix')

diff --git a/modules/networking/nixos/unbound.nix b/modules/networking/nixos/unbound.nix
new file mode 100644
index 0000000..b8b1e0b
--- /dev/null
+++ b/modules/networking/nixos/unbound.nix
@@ -0,0 +1,30 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.system.network.dns;
+in
+  lib.mkIf cfg.areYouAServer {
+    networking = {
+      nameservers = ["127.0.0.1"];
+      resolvconf.enable = lib.mkForce true; # we disabled this earlier
+    };
+    services.resolved.enable = false;
+
+    services.unbound = {
+      enable = true;
+      settings.server = {
+        interface = ["0.0.0.0"];
+        port = 53;
+        access-control = [
+          "127.0.0.0/8 allow"
+          "10.100.0.0/24 allow"
+          "0.0.0.0/0 refuse"
+        ];
+
+        local-zone = [''"ganymede." redirect''];
+        local-data = [''"ganymede. IN A 10.100.0.1"''];
+      };
+    };
+  }
-- 
cgit v1.3.1