first commit

2026-06-24 07:05:47 +02:00
commit cfff0dedb3
24 changed files with 406 additions and 0 deletions
@@ -0,0 +1,27 @@
+_:
+{
+  services.unbound = {
+    enable = true;
+    enableRootTrustAnchor = true;
+
+    settings = {
+      server = {
+        interface = [ "0.0.0.0" "::0" ];
+
+        access-control = [
+          "127.0.0.0/8 allow"
+          "10.11.0.0/24 allow"
+        ];
+
+        prefetch = true;
+        qname-minimisation = true;
+
+        hide-identity = true;
+        hide-version = true;
+
+        harden-glue = true;
+        harden-dnssec-stripped = true;
+      };
+    };
+  };
+}