summaryrefslogtreecommitdiff
path: root/sys/preset/dmz.nix
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2025-01-18 13:36:50 -0600
committerAlejandro Soto <alejandro@34project.org>2025-01-22 20:53:35 -0600
commit9bc15fd531da793bc2f15a486c40351974bd3f85 (patch)
tree66bcde0d9fb7a3687c30194095862520fcf0aa0c /sys/preset/dmz.nix
parentf92d8e05e604f51f053c37ec47830ceae531bd38 (diff)
sys: remove IPv4 on dmz, gate; enable DNS64 for dmz
Diffstat (limited to 'sys/preset/dmz.nix')
-rw-r--r--sys/preset/dmz.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/sys/preset/dmz.nix b/sys/preset/dmz.nix
index eae58cc..4a3fc69 100644
--- a/sys/preset/dmz.nix
+++ b/sys/preset/dmz.nix
@@ -41,6 +41,13 @@ in
web.sites.portal.enable = true;
};
+ services = {
+ resolved = {
+ llmnr = "false";
+ fallbackDns = [ ]; # Disable the default systemd-resolved server list
+ };
+ };
+
users = {
allowNoPasswordLogin = cfg.container;
mutableUsers = false;