networking.firewall.allowedTCPPorts = [ 53 ];
users.users.named.extraGroups = [ "keys" ];
services.bind = {
+ package = pkgs.bind.overrideAttrs(old: {
+ # Partially revert https://gitlab.isc.org/isc-projects/bind9/-/commit/fd96a418689593882485bb715b3cd76b9af6f968
+ # Some DNS server don’t sent the question section
+ postPatch = (old.postPatch or "") + ''
+ sed -i -e "/missing question section/{n;N;d;}" lib/dns/xfrin.c
+ '';
+ });
enable = true;
cacheNetworks = ["any"];
extraOptions = ''