modules/hyprspace: allow access to DNS servers

This commit is contained in:
Max Headroom 2023-04-12 23:27:20 +02:00
parent c5541eadb1
commit cf2f0e625c

View file

@ -25,6 +25,7 @@ let
privateKeyFile = config.age.secrets.hyprspace-key.path; privateKeyFile = config.age.secrets.hyprspace-key.path;
runConfig = "/run/hyprspace.yml"; runConfig = "/run/hyprspace.yml";
nameservers = lib.unique config.networking.nameservers;
in { in {
networking.hosts = lib.mapAttrs' (k: v: lib.nameValuePair v.hyprspace.addr [k "${k}.hypr"]) hyprspaceCapableNodes; networking.hosts = lib.mapAttrs' (k: v: lib.nameValuePair v.hyprspace.addr [k "${k}.hypr"]) hyprspaceCapableNodes;
age.secrets.hyprspace-key = { age.secrets.hyprspace-key = {
@ -66,6 +67,7 @@ in {
"fc00::/7" "fc00::/7"
"fe80::/10" "fe80::/10"
]; ];
IPAddressAllow = nameservers;
}; };
}; };
networking.firewall = { networking.firewall = {