From 16000b9bb316846d85cec6fb81f3b30b0fbaee0a Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Mon, 3 Jun 2024 21:53:25 +0200
Subject: nanopi: fix dns/dhcp server settings

---
 system/nanopi.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'system')

diff --git a/system/nanopi.nix b/system/nanopi.nix
index 03765699..0172e593 100755
--- a/system/nanopi.nix
+++ b/system/nanopi.nix
@@ -532,14 +532,16 @@ in
       # if this is false, a remote query for nanopi returns 127.0.0.2, because that's in /etc/hosts
       no-hosts = true;
 
+      dnssec = true;
+      trust-anchor = ".,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D";
+
       enable-ra = true;
       dhcp-lease-max = 240;
       dhcp-authoritative = true;
       dhcp-rapid-commit = true;
       dhcp-range = [
         "10.0.1.0,10.0.1.250,12h"
-        "::, constructor:bridge0, ra-stateless, 48h"
-        "fd12:d04f:65d::, ra-stateless, ra-names, 48h"
+        "::,constructor:bridge0,ra-stateless,ra-names,48h"
       ];
       dhcp-host = [
         "00:a0:de:b3:0c:01,10.0.0.50,wxa-50"
@@ -550,7 +552,6 @@ in
       ];
       dhcp-option = [
         "option:ntp-server,0.0.0.0"
-        "option:dns-server,0.0.0.0,10.0.0.81"
         "option:tftp-server,0.0.0.0"
         "option:ip-forward-enable,0" # ip-forwarding
         "252,\"\\n\""
-- 
cgit 1.4.1