depot/cluster/services/dns/default.nix

{ config, depot, ... }:

let
  inherit (depot.config) hours;
in
{
  vars.pdns-api-key-secret = {
    file = ./pdns-api-key.age;
    mode = "0400";
  };
  links = {
    dnsResolver = {
      ipv4 = hours.VEGAS.interfaces.vstub.addr;
      port = 53;
    };
    powerdns-api = {
      ipv4 = config.vars.mesh.VEGAS.meshIp;
      protocol = "http";
    };
  };
  services.dns = {
    nodes = {
      master = [ "VEGAS" ];
      slave = [ "checkmate" "prophet" ];
      coredns = [ "VEGAS" ];
      client = [ "VEGAS" "prophet" ];
    };
    nixos = {
      master = [
        ./authoritative.nix
        ./admin.nix
      ];
      slave = ./authoritative.nix;
      coredns = ./coredns.nix;
      client = ./client.nix;
    };
  };
}