coredns: init

flake.nix

@@ -63,6 +63,7 @@
 
         ./modules/network/avahi.nix
         ./modules/services/ssh.nix
+        ./modules/services/dns/coredns.nix
         ./modules/network/vpn/tailscale.nix
 
         ./modules/nix/linux.nix

modules/services/dns/coredns.nix

@@ -0,0 +1,25 @@
+{ config, ... }:
+
+{
+  services.coredns = {
+    enable = true;
+    config = ''
+      .:53 {
+        hosts {
+          100.100.144.4 seika.astolfo.org
+          fallthrough
+        }
+
+        # rewrite the CNAME to itself so hosts rule apply
+        rewrite cname exact seika.astolfo.org. seika.astolfo.org.
+
+        forward . 1.1.1.1
+        log
+        errors
+      }
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [ 53 ];
+  networking.firewall.allowedUDPPorts = [ 53 ];
+}