bundles/unbound: introduce, add to nodes
All checks were successful
bundlewrap/pipeline/head This commit looks good

This commit is contained in:
Franzi 2020-12-13 14:59:44 +01:00
parent c5e43188ca
commit 3eeb253e55
Signed by: kunsi
GPG key ID: 12E3D2136B818350
7 changed files with 141 additions and 13 deletions

View file

@ -10,6 +10,7 @@ nodes['home.router'] = {
'openvpn-client',
'pppd',
'radvd',
'unbound',
'vnstat',
'wide-dhcp6c',
'wireguard',
@ -53,7 +54,7 @@ nodes['home.router'] = {
'interface': 'enp1s0.42',
'options': {
'routers': '172.19.138.1',
'domain-name-servers': '8.8.8.8, 8.8.4.4',
'domain-name-servers': '172.19.138.1',
'domain-name': 'franzi-home.kunbox.net',
'broadcast-address': '172.19.138.255',
'subnet-mask': '255.255.255.0',
@ -77,9 +78,6 @@ nodes['home.router'] = {
'iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE',
],
},
'nameservers': atomic({
'9.9.9.10',
}),
'netdata': {
'restrict-to-interfaces': {
'enp1s0.42',
@ -99,12 +97,7 @@ nodes['home.router'] = {
'radvd': {
'integrate-with-pppd': True,
'interfaces': {
'enp1s0.42': {
'rdnss': {
'2001:4860:4860::8888',
'2001:4860:4860::8844',
},
},
'enp1s0.42': {},
},
},
'pppd': {
@ -117,6 +110,12 @@ nodes['home.router'] = {
'password': vault.decrypt('encrypt$gAAAAABfr8Cq5M1hweeJTQAl0dLhFntdlw-QnkIYUQpY-_ycODVWOpyeAwjwOgWLSdsdXIUvqcoiXPZPV-BE12p5C42NGnj9r7sKYpoGz8xfuGIk6haMa2g='),
},
},
'unbound': {
'restrict-to-interfaces': {
'enp1s0.23',
'enp1s0.42',
},
},
'users': {
'f2k1de': {
'ssh_pubkey': {