l 1 echelon: add dnsmasq config

2015-10-21 15:59:47 +02:00 · 2015-10-21 15:59:47 +02:00 · 27a4aa4a49
commit 27a4aa4a49
parent 10be0e7006
1 changed files with 14 additions and 0 deletions
--- a/lass/1systems/echelon.nix
+++ b/lass/1systems/echelon.nix
@ -33,6 +33,20 @@ in {
    {
      sound.enable = false;
    }
+    {
+      imports = [
+        ../3modules/dnsmasq.nix
+      ];
+      lass.dnsmasq = {
+        enable = true;
+        config = ''
+          interface=retiolum
+        '';
+      };
+      krebs.iptables.tables.filter.INPUT.rules = [
+        { predicate = "-i retiolum -p udp --dport 53"; target = "ACCEPT"; }
+      ];
+    }
  ];

  krebs.build.host = config.krebs.hosts.echelon;