networking.firewall.allowedTCPPorts = [ 53 ];
users.users.named.extraGroups = [ "keys" ];
services.bind = {
- package = pkgs.bind.overrideAttrs(old: {
- # Partially revert https://gitlab.isc.org/isc-projects/bind9/-/commit/fd96a418689593882485bb715b3cd76b9af6f968
- # Some DNS server don’t sent the question section
- postPatch = (old.postPatch or "") + ''
- sed -i -e "/missing question section/{n;N;d;}" lib/dns/xfrin.c
- '';
- });
enable = true;
cacheNetworks = ["any"];
extraOptions = ''