mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-06-11 04:05:40 +03:00
374e6bcc40
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:
nix-build ci -A fmt.check
This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).
This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).
Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).
If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
80 lines
2.4 KiB
Nix
80 lines
2.4 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.routedns;
|
|
settingsFormat = pkgs.formats.toml { };
|
|
in
|
|
{
|
|
options.services.routedns = {
|
|
enable = mkEnableOption "RouteDNS - DNS stub resolver, proxy and router";
|
|
|
|
settings = mkOption {
|
|
type = settingsFormat.type;
|
|
example = literalExpression ''
|
|
{
|
|
resolvers.cloudflare-dot = {
|
|
address = "1.1.1.1:853";
|
|
protocol = "dot";
|
|
};
|
|
groups.cloudflare-cached = {
|
|
type = "cache";
|
|
resolvers = ["cloudflare-dot"];
|
|
};
|
|
listeners.local-udp = {
|
|
address = "127.0.0.1:53";
|
|
protocol = "udp";
|
|
resolver = "cloudflare-cached";
|
|
};
|
|
listeners.local-tcp = {
|
|
address = "127.0.0.1:53";
|
|
protocol = "tcp";
|
|
resolver = "cloudflare-cached";
|
|
};
|
|
}
|
|
'';
|
|
description = ''
|
|
Configuration for RouteDNS, see <https://github.com/folbricht/routedns/blob/master/doc/configuration.md>
|
|
for more information.
|
|
'';
|
|
};
|
|
|
|
configFile = mkOption {
|
|
default = settingsFormat.generate "routedns.toml" cfg.settings;
|
|
defaultText = "A RouteDNS configuration file automatically generated by values from services.routedns.*";
|
|
type = types.path;
|
|
example = literalExpression ''"''${pkgs.routedns}/cmd/routedns/example-config/use-case-1.toml"'';
|
|
description = "Path to RouteDNS TOML configuration file.";
|
|
};
|
|
|
|
package = mkPackageOption pkgs "routedns" { };
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.services.routedns = {
|
|
description = "RouteDNS - DNS stub resolver, proxy and router";
|
|
after = [ "network.target" ]; # in case a bootstrap resolver is used, this might fail a few times until the respective server is actually reachable
|
|
wantedBy = [ "multi-user.target" ];
|
|
wants = [ "network.target" ];
|
|
startLimitIntervalSec = 30;
|
|
startLimitBurst = 5;
|
|
serviceConfig = {
|
|
Restart = "on-failure";
|
|
RestartSec = "5s";
|
|
LimitNPROC = 512;
|
|
LimitNOFILE = 1048576;
|
|
DynamicUser = true;
|
|
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
|
|
NoNewPrivileges = true;
|
|
ExecStart = "${getBin cfg.package}/bin/routedns -l 4 ${cfg.configFile}";
|
|
};
|
|
};
|
|
};
|
|
meta.maintainers = with maintainers; [ jsimonetti ];
|
|
}
|