delft: enable resolved and use hetzners recursors
Martin Weinelt committed
Feb 12, 2024 at 01:17 UTC
b47dd1f4d676583176546cbc1c50d43801db008f
1 file changed
+11
delft/common.nix
+11
@@ -64,6 +64,17 @@ with lib;
64
networking.firewall.allowPing = true;
65
networking.firewall.allowedTCPPorts = [ 10050 ];
66
67
+ services.resolved = {
68
+ enable = true;
69
+ fallbackDns = [
70
+ # https://docs.hetzner.com/de/dns-console/dns/general/recursive-name-servers/
71
+ "185.12.64.1"
72
+ "185.12.64.2"
73
+ "2a01:4ff:ff00::add:1"
74
+ "2a01:4ff:ff00::add:2"
75
+ ];
76
+ };
77
+
78
# Bump the open files limit so that non-root users can run NixOS VM
79
# tests (Samba opens lot of files).
80
security.pam.loginLimits =