From 8a820cacee1ff07ae7397d053b26e66f7086a4a4 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Mon, 29 Jun 2026 00:31:26 +0200
Subject: updated some stuff, added persistance

---
 os/srv/dns.nix | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

(limited to 'os/srv/dns.nix')

diff --git a/os/srv/dns.nix b/os/srv/dns.nix
index 2da4c66..b8a973f 100644
--- a/os/srv/dns.nix
+++ b/os/srv/dns.nix
@@ -77,12 +77,21 @@ in
           ];
           rewrites = [
             {
-              domain = "router.local";
-              answer = config.os.core.network.ips.vm1-opnsense;
+              domain = "router.lan";
+              answer = config.os.core.network.ips.opnsense-vm;
+            }
+            {
+              domain = "nas.lan";
+              answer = config.os.core.network.ips.bare-metal;
+            }
+            {
+              domain = "ldap.${masterDomain}";
+              answer = config.os.core.network.ips.gateway-vm;
             }
           ];
           port = 53;
           upstream_dns = [ "127.0.0.1:${toString unboundPort}" ];
+          fallback_dns = [ "9.9.9.9" ];
           bootstrap_dns = [ "9.9.9.9" ];
           cache_size = 536870912;
           anonymize_client_ip = true;
-- 
cgit v1.3