From 8b9df2c8fc8262c6f56a90745b06390381b33fc0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?KJ=20=C3=98rbekk?= <kj@orbekk.com>
Date: Sun, 21 May 2017 09:20:20 -0400
Subject: shape: Bind configuration

---
 config/dns.nix | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

(limited to 'config')

diff --git a/config/dns.nix b/config/dns.nix
index edf9a0e..9f05807 100644
--- a/config/dns.nix
+++ b/config/dns.nix
@@ -1,11 +1,26 @@
 # dnssec-signzone -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N unixtime -o $zone -t db.${zone}
 { config, lib, pkgs, ... }:
+let
+  zones = pkgs.callPackage ../pkgs/zone-files/default.nix { };
+in
 {
   services.bind = {
     enable = true;
+    extraConfig = ''
+      zone orbekk.com {
+        type master;
+	file "/var/run/named/db.orbekk.com.zone";
+	auto-dnssec maintain;
+	key-directory "/opt/secret/bind/orbekk.com";
+	update-policy local;
+	allow-query { any; };
+      };
+    '';
   };
 
   systemd.services.bind = {
-    preStart = lib.mkAfter "echo test";
+    preStart = lib.mkAfter ''
+	cp -f ${zones}/* /var/run/named/
+    '';
   };
 }
-- 
cgit v1.2.3