Switch to coredns + refactor dns hosts mapping into service + more refactor

8 files changed, 56 insertions, 56 deletions

diff --git a/modules/dashboard/default.nix b/modules/dashboard/default.nix
index 196eab1..c1de246 100644
--- a/modules/dashboard/default.nix
+++ b/modules/dashboard/default.nix
@@ -4,7 +4,7 @@ let
   ports = settings.network.ports;
 in
 {
-  imports = [ ./bacchus-dashboard.service.nix ];
+  imports = [ ../../services/bacchus-dashboard/bacchus-dashboard.service.nix ];
 
   services.bacchus-dashboard = {
     enable = true;
diff --git a/modules/hardware.nix b/modules/hardware/default.nix
index 7b11ca6..098b3cc 100644
--- a/modules/hardware.nix
+++ b/modules/hardware/default.nix
@@ -2,6 +2,7 @@
 {
   imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
+    ./fs.nix
   ];
 
   boot.initrd = {
@@ -44,30 +45,5 @@
     efi.canTouchEfiVariables = true;
   };
 
-  # File system
-  fileSystems = {
-    "/" = {
-      device = "/dev/disk/by-label/nixos";
-      fsType = "ext4";
-    };
-    "/boot" = {
-      device = "/dev/disk/by-label/boot";
-      fsType = "vfat";
-    };
-    "/media" = {
-      device = "/dev/disk/by-label/media";
-      fsType = "ext4";
-      options = [ "rw" "nofail" "x-systemd.automount" "x-systemd.mount-timeout=30s" ];
-    };
-  };
-  swapDevices = [{ device = "/dev/disk/by-label/swap"; }];
-
   networking.useDHCP = lib.mkDefault true;
-
-  systemd.extraConfig = ''DefaultLimitNOFILE=65536'';
-  systemd.user.extraConfig = ''DefaultLimitNOFILE=65536'';
-  boot.kernel.sysctl."fs.inotify.max_user_instances" = 8192;
-  security.pam.loginLimits = [
-    { domain = "*"; type = "-"; item = "nofile"; value = "65536"; }
-  ];
 }
diff --git a/modules/hardware/fs.nix b/modules/hardware/fs.nix
new file mode 100644
index 0000000..aaf67d6
--- /dev/null
+++ b/modules/hardware/fs.nix
@@ -0,0 +1,27 @@
+{ ... }:
+{
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-label/nixos";
+      fsType = "ext4";
+    };
+    "/boot" = {
+      device = "/dev/disk/by-label/boot";
+      fsType = "vfat";
+    };
+    "/media" = {
+      device = "/dev/disk/by-label/media";
+      fsType = "ext4";
+      options = [ "rw" "nofail" "x-systemd.automount" "x-systemd.mount-timeout=30s" ];
+    };
+  };
+  swapDevices = [{ device = "/dev/disk/by-label/swap"; }];
+
+  # Set high limits for file watching/file handles
+  systemd.extraConfig = ''DefaultLimitNOFILE=65536'';
+  systemd.user.extraConfig = ''DefaultLimitNOFILE=65536'';
+  boot.kernel.sysctl."fs.inotify.max_user_instances" = 8192;
+  security.pam.loginLimits = [
+    { domain = "*"; type = "-"; item = "nofile"; value = "65536"; }
+  ];
+}
diff --git a/modules/network/default.nix b/modules/network/default.nix
index 290c291..78fac75 100644
--- a/modules/network/default.nix
+++ b/modules/network/default.nix
@@ -8,9 +8,15 @@ in
   imports = [
     ./wireless.nix
     ./ssh.nix
-    ./service-router.service.nix
+    ../../services/service-router.service.nix
+    ../../services/bacchus-dns.service.nix
   ];
 
+  networking = {
+    hostName = "bacchus";
+    firewall.enable = true;
+  };
+
   services.service-router = {
     enable = true;
     routes = {
@@ -23,12 +29,15 @@ in
       "syncthing.local" = { inherit host; port = ports.syncthing; };
       "lidarr.local" = { inherit host; port = ports.lidarr; };
       "ntfy.local" = { inherit host; port = ports.ntfy; };
-      "grafana.local" = { inherit host; port = ports.grafana; extraOptions.recommendedProxySettings = true; };
+      "grafana.local" = { inherit host; port = ports.grafana; extraNginxOptions.recommendedProxySettings = true; };
     };
   };
 
-  networking = {
-    hostName = "bacchus";
-    firewall.enable = true;
+  # Host mappings defined by service-router
+  services.bacchus-dns = {
+    enable = true;
+    port = 53;
+    openFirewall = true;
+    fallback = [ "1.1.1.1" "8.8.8.8" ];
   };
 }
diff --git a/modules/users.nix b/modules/users/default.nix
index 223a2f8..7969496 100644
--- a/modules/users.nix
+++ b/modules/users/default.nix
@@ -1,6 +1,6 @@
 { pkgs, lib, ... }:
 let
-  settings = import ../settings.nix { inherit lib; };
+  settings = import ../../settings.nix { inherit lib; };
 in
 {
   users.users.root.password = settings.passwords.root;
diff --git a/modules/dashboard/bacchus-dashboard.service.nix b/services/bacchus-dashboard/bacchus-dashboard.service.nix
index 8b0fcb9..8b0fcb9 100644
--- a/modules/dashboard/bacchus-dashboard.service.nix
+++ b/services/bacchus-dashboard/bacchus-dashboard.service.nix
diff --git a/modules/dashboard/dashboard-template.nix b/services/bacchus-dashboard/dashboard-template.nix
index 9883a1d..9883a1d 100644
--- a/modules/dashboard/dashboard-template.nix
+++ b/services/bacchus-dashboard/dashboard-template.nix
diff --git a/modules/network/service-router.service.nix b/services/service-router.service.nix
index 14fc1b2..e52280f 100644
--- a/modules/network/service-router.service.nix
+++ b/services/service-router.service.nix
@@ -1,17 +1,12 @@
-{ config, lib, dns, ... }:
+{ config, lib, ... }:
 with lib;
 let
   cfg = config.services.service-router;
-  domainAZone = domain: record: {
-    A = [ record ];
-    SOA = {
-      nameServer = "ns.${domain}.";
-      adminEmail = "dont@email.me";
-      serial = 2019030800;
-    };
-    NS = [ "ns.${domain}." ];
-  };
 in {
+  imports = [
+    ./bacchus-dns.service.nix
+  ];
+
   options.services.service-router = {
     enable = mkEnableOption "enable router";
     routes = mkOption {
@@ -20,8 +15,7 @@ in {
         host = mkOption { type = types.str; default = "127.0.0.1"; };
         protocol = mkOption { type = types.str; default = "http"; };
         basePath = mkOption { type = types.str; default = ""; };
-        nginx = mkOption { type = types.attrs; default = {}; };
-        extraOptions = mkOption { type = types.attrs; default = {}; };
+        extraNginxOptions = mkOption { type = types.attrs; default = {}; };
       }; });
       default = {};
     };
@@ -33,27 +27,21 @@ in {
       recommendedOptimisation = true;
       virtualHosts = lib.mapAttrs (_: val:
         let
-          opts = if hasAttr "extraOptions" val then val.extraOptions else {};
+          opts = if hasAttr "extraNginxOptions" val then val.extraNginxOptions else {};
         in {
-          locations."/" = if val.nginx == {} then {
+          locations."/" = {
             proxyPass =
               "${val.protocol}://${val.host}:${toString val.port}${val.basePath}";
             proxyWebsockets = true;
-          } // opts else val.nginx;
+          } // opts;
         }
       ) cfg.routes;
     };
 
-    services.nsd = {
+    # Hostname mapping
+    services.bacchus-dns = {
       enable = true;
-      interfaces = [ "0.0.0.0" ];
-      zones = lib.mapAttrs (domain: val: {
-        data = dns.lib.toString domain (domainAZone domain val.host);
-      }) cfg.routes;
+      hosts = mapAttrs (_: val: val.host) cfg.routes;
     };
-    networking.firewall.allowedTCPPorts = [ 53 ];
-    networking.firewall.allowedUDPPorts = [ 53 ];
-
-    networking.hosts."127.0.0.1" = lib.mapAttrsToList (name: _: name) cfg.routes;
   };
 }