summaryrefslogtreecommitdiffstats
path: root/nixos/modules/system/boot/resolved.nix
diff options
context:
space:
mode:
authorWill Fancher <elvishjerricco@gmail.com>2024-04-07 20:32:41 -0400
committerWill Fancher <elvishjerricco@gmail.com>2024-05-21 02:41:22 -0400
commit146bffe5aa6c6f8ea7d280ca85f4cbf239fb9751 (patch)
treed1f8b321824fb42c8857fc47d021932dc3695f92 /nixos/modules/system/boot/resolved.nix
parentd3cda6aed36d05f90da59d1489c0eba58a06e764 (diff)
nixos/systemd-resolved: Re-indent
Diffstat (limited to 'nixos/modules/system/boot/resolved.nix')
-rw-r--r--nixos/modules/system/boot/resolved.nix109
1 files changed, 56 insertions, 53 deletions
diff --git a/nixos/modules/system/boot/resolved.nix b/nixos/modules/system/boot/resolved.nix
index 64a15179438f..6006ed7894c9 100644
--- a/nixos/modules/system/boot/resolved.nix
+++ b/nixos/modules/system/boot/resolved.nix
@@ -128,58 +128,61 @@ in
};
- config = mkIf cfg.enable {
-
- assertions = [
- { assertion = !config.networking.useHostResolvConf;
- message = "Using host resolv.conf is not supported with systemd-resolved";
- }
- ];
-
- users.users.systemd-resolve.group = "systemd-resolve";
-
- # add resolve to nss hosts database if enabled and nscd enabled
- # system.nssModules is configured in nixos/modules/system/boot/systemd.nix
- # added with order 501 to allow modules to go before with mkBefore
- system.nssDatabases.hosts = (mkOrder 501 ["resolve [!UNAVAIL=return]"]);
-
- systemd.additionalUpstreamSystemUnits = [
- "systemd-resolved.service"
- ];
-
- systemd.services.systemd-resolved = {
- wantedBy = [ "multi-user.target" ];
- aliases = [ "dbus-org.freedesktop.resolve1.service" ];
- restartTriggers = [ config.environment.etc."systemd/resolved.conf".source ];
- };
-
- environment.etc = {
- "systemd/resolved.conf".text = ''
- [Resolve]
- ${optionalString (config.networking.nameservers != [])
- "DNS=${concatStringsSep " " config.networking.nameservers}"}
- ${optionalString (cfg.fallbackDns != null)
- "FallbackDNS=${concatStringsSep " " cfg.fallbackDns}"}
- ${optionalString (cfg.domains != [])
- "Domains=${concatStringsSep " " cfg.domains}"}
- LLMNR=${cfg.llmnr}
- DNSSEC=${cfg.dnssec}
- DNSOverTLS=${cfg.dnsovertls}
- ${config.services.resolved.extraConfig}
- '';
-
- # symlink the dynamic stub resolver of resolv.conf as recommended by upstream:
- # https://www.freedesktop.org/software/systemd/man/systemd-resolved.html#/etc/resolv.conf
- "resolv.conf".source = "/run/systemd/resolve/stub-resolv.conf";
- } // optionalAttrs dnsmasqResolve {
- "dnsmasq-resolv.conf".source = "/run/systemd/resolve/resolv.conf";
- };
-
- # If networkmanager is enabled, ask it to interface with resolved.
- networking.networkmanager.dns = "systemd-resolved";
-
- networking.resolvconf.package = pkgs.systemd;
-
- };
+ config = mkMerge [
+ (mkIf cfg.enable {
+
+ assertions = [
+ { assertion = !config.networking.useHostResolvConf;
+ message = "Using host resolv.conf is not supported with systemd-resolved";
+ }
+ ];
+
+ users.users.systemd-resolve.group = "systemd-resolve";
+
+ # add resolve to nss hosts database if enabled and nscd enabled
+ # system.nssModules is configured in nixos/modules/system/boot/systemd.nix
+ # added with order 501 to allow modules to go before with mkBefore
+ system.nssDatabases.hosts = (mkOrder 501 ["resolve [!UNAVAIL=return]"]);
+
+ systemd.additionalUpstreamSystemUnits = [
+ "systemd-resolved.service"
+ ];
+
+ systemd.services.systemd-resolved = {
+ wantedBy = [ "multi-user.target" ];
+ aliases = [ "dbus-org.freedesktop.resolve1.service" ];
+ restartTriggers = [ config.environment.etc."systemd/resolved.conf".source ];
+ };
+
+ environment.etc = {
+ "systemd/resolved.conf".text = ''
+ [Resolve]
+ ${optionalString (config.networking.nameservers != [])
+ "DNS=${concatStringsSep " " config.networking.nameservers}"}
+ ${optionalString (cfg.fallbackDns != null)
+ "FallbackDNS=${concatStringsSep " " cfg.fallbackDns}"}
+ ${optionalString (cfg.domains != [])
+ "Domains=${concatStringsSep " " cfg.domains}"}
+ LLMNR=${cfg.llmnr}
+ DNSSEC=${cfg.dnssec}
+ DNSOverTLS=${cfg.dnsovertls}
+ ${config.services.resolved.extraConfig}
+ '';
+
+ # symlink the dynamic stub resolver of resolv.conf as recommended by upstream:
+ # https://www.freedesktop.org/software/systemd/man/systemd-resolved.html#/etc/resolv.conf
+ "resolv.conf".source = "/run/systemd/resolve/stub-resolv.conf";
+ } // optionalAttrs dnsmasqResolve {
+ "dnsmasq-resolv.conf".source = "/run/systemd/resolve/resolv.conf";
+ };
+
+ # If networkmanager is enabled, ask it to interface with resolved.
+ networking.networkmanager.dns = "systemd-resolved";
+
+ networking.resolvconf.package = pkgs.systemd;
+
+ })
+
+ ];
}