summary refs log tree commit diff stats
diff options
context:
space:
mode:
authorAlan Pearce2024-06-03 21:53:25 +0200
committerAlan Pearce2024-06-03 22:11:34 +0200
commit16000b9bb316846d85cec6fb81f3b30b0fbaee0a (patch)
tree5ad9dea16a92e5c48c3cdcc72a25c7525f28f0eb
parentf9eb54a62b679f3beb27e2e89b1d816c2b32a0b4 (diff)
downloadnixfiles-16000b9bb316846d85cec6fb81f3b30b0fbaee0a.tar.lz
nixfiles-16000b9bb316846d85cec6fb81f3b30b0fbaee0a.tar.zst
nixfiles-16000b9bb316846d85cec6fb81f3b30b0fbaee0a.zip
nanopi: fix dns/dhcp server settings
-rwxr-xr-xsystem/nanopi.nix7
1 files changed, 4 insertions, 3 deletions
diff --git a/system/nanopi.nix b/system/nanopi.nix
index 03765699..0172e593 100755
--- a/system/nanopi.nix
+++ b/system/nanopi.nix
@@ -532,14 +532,16 @@ in
       # if this is false, a remote query for nanopi returns 127.0.0.2, because that's in /etc/hosts
       no-hosts = true;
 
+      dnssec = true;
+      trust-anchor = ".,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D";
+
       enable-ra = true;
       dhcp-lease-max = 240;
       dhcp-authoritative = true;
       dhcp-rapid-commit = true;
       dhcp-range = [
         "10.0.1.0,10.0.1.250,12h"
-        "::, constructor:bridge0, ra-stateless, 48h"
-        "fd12:d04f:65d::, ra-stateless, ra-names, 48h"
+        "::,constructor:bridge0,ra-stateless,ra-names,48h"
       ];
       dhcp-host = [
         "00:a0:de:b3:0c:01,10.0.0.50,wxa-50"
@@ -550,7 +552,6 @@ in
       ];
       dhcp-option = [
         "option:ntp-server,0.0.0.0"
-        "option:dns-server,0.0.0.0,10.0.0.81"
         "option:tftp-server,0.0.0.0"
         "option:ip-forward-enable,0" # ip-forwarding
         "252,\"\\n\""