M-Labs
/
it-infra
8
0
Fork 4
Code Issues 8 Pull Requests Releases Wiki Activity

nixbld: update dnsmasq settings

force-ssl-main-website
Sebastien Bourdeauducq 2023-06-04 22:40:14 +08:00
parent 6b35c751d8
commit 2227e816bc
1 changed files with 41 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

82
nixbld-etc-nixos/configuration.nix
View File

@ -238,51 +238,51 @@ in
}; };
services.dnsmasq = { services.dnsmasq = {
enable = true; enable = true;
servers = ["::1#5354"]; settings = {
extraConfig = '' server = ["::1#5354"];
interface=${netifLan} interface = [ netifLan netifWifi ];
interface=${netifWifi} bind-interfaces = true;
bind-interfaces dhcp-range = [
dhcp-range=interface:${netifLan},192.168.1.81,192.168.1.254,24h "interface:${netifLan},192.168.1.81,192.168.1.254,24h"
dhcp-range=interface:${netifWifi},192.168.12.10,192.168.12.254,24h "interface:${netifWifi},192.168.12.10,192.168.12.254,24h"
enable-ra "interface:${netifLan},::,constructor:${netifLan},ra-names"
dhcp-range=interface:${netifLan},::,constructor:${netifLan},ra-names "interface:${netifWifi},::,constructor:${netifWifi},ra-only"
dhcp-range=interface:${netifWifi},::,constructor:${netifWifi},ra-only ];
enable-ra = true;
no-resolv no-resolv = true;
# Static IPv4s to make Red Pitayas with factory firmware less annoying dhcp-host = [
dhcp-host=rp-f05cc9,192.168.1.190 # Static IPv4s to make Red Pitayas with factory firmware less annoying
dhcp-host=rp-f0612e,192.168.1.191 "rp-f05cc9,192.168.1.190"
# Static IPv4s to make port redirections work "rp-f0612e,192.168.1.191"
dhcp-host=rpi-1,192.168.1.201 # Static IPv4s to make port redirections work
dhcp-host=rpi-2,192.168.1.202 "rpi-1,192.168.1.201"
dhcp-host=rpi-3,192.168.1.203 "rpi-2,192.168.1.202"
dhcp-host=rpi-4,192.168.1.204 "rpi-3,192.168.1.203"
"rpi-4,192.168.1.204"
];
# Static IP addresses for non-DHCP boards address = [
address=/thermostat/192.168.1.26 # Static IP addresses for non-DHCP boards
address=/powercycler/192.168.1.31 "/thermostat/192.168.1.26"
address=/kc705/192.168.1.50 "/powercycler/192.168.1.31"
address=/zynq-experiments/192.168.1.51 "/kc705/192.168.1.50"
address=/zc706/192.168.1.52 "/zynq-experiments/192.168.1.51"
address=/zc706-2/192.168.1.53 "/zc706/192.168.1.52"
address=/cora-z7/192.168.1.54 "/zc706-2/192.168.1.53"
address=/rust-pitaya/192.168.1.55 "/cora-z7/192.168.1.54"
address=/sayma/192.168.1.60 "/rust-pitaya/192.168.1.55"
address=/metlino/192.168.1.65 "/kasli/192.168.1.70"
address=/kasli/192.168.1.70 "/kasli-customer/192.168.1.75"
address=/kasli-customer/192.168.1.75 "/stabilizer-customer/192.168.1.76"
address=/stabilizer-customer/192.168.1.76
# uTCA MCH from NAT # Google can't do DNS geolocation correctly and slows down websites of everyone using
address=/tschernobyl/192.168.1.80 # their shitty font cloud hosting. In HK, you sometimes get IPs behind the GFW that you
# cannot reach.
# Google can't do DNS geolocation correctly and slows down websites of everyone using "/fonts.googleapis.com/142.250.207.74"
# their shitty font cloud hosting. In HK, you sometimes get IPs behind the GFW that you ];
# cannot reach. };
address=/fonts.googleapis.com/142.250.207.74
'';
}; };
# Select internationalisation properties. # Select internationalisation properties.