From 93a09b29a58c83bdd491c3dfa35ea811baf729b3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Mon, 7 Oct 2024 18:57:55 -0700
Subject: [PATCH] fra1-b: +iodine

---
 data.nix                       |   1 +
 hosts/fra1-b/configuration.nix |   9 +++++++++
 secrets.nix                    |   1 +
 secrets/iodine.age             | Bin 0 -> 1081 bytes
 4 files changed, 11 insertions(+)
 create mode 100644 secrets/iodine.age

diff --git a/data.nix b/data.nix
index b6a8ccf..da0b62b 100644
--- a/data.nix
+++ b/data.nix
@@ -24,6 +24,7 @@ rec {
     immich-server = 3002;
     immich-machine-learning = 3003; # as of writing, hardcoded in the immich module
 
+    nsd-unwrapped = 5353;
     soju = 6697;
     soju-ws = 6698;
     matrix-synapse = 8008;
diff --git a/hosts/fra1-b/configuration.nix b/hosts/fra1-b/configuration.nix
index 213cd7b..650f54d 100644
--- a/hosts/fra1-b/configuration.nix
+++ b/hosts/fra1-b/configuration.nix
@@ -14,6 +14,7 @@ in
     motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
     root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
     sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
+    iodine-passwd.file = ../../secrets/iodine.age;
     ssh8022-server = {
       file = ../../secrets/ssh8022.age;
       owner = "spiped";
@@ -115,8 +116,16 @@ in
   };
 
   services = {
+    iodine.server = {
+      enable = true;
+      ip = "172.16.10.1/24";
+      passwordFile = config.age.secrets.iodine-passwd.path;
+      extraConfig = "-p ${toString myData.ports.nsd-unwrapped}";
+    };
+
     nsd = {
       enable = true;
+      port = myData.ports.nsd-unwrapped;
       interfaces = [
         "0.0.0.0"
         "::"
diff --git a/secrets.nix b/secrets.nix
index 24b2477..a053664 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -71,4 +71,5 @@ in
   "secrets/root_passwd_hash.age"
   "secrets/postfix_sasl_passwd.age"
   "secrets/ssh8022.age"
+  "secrets/iodine.age"
 ]
diff --git a/secrets/iodine.age b/secrets/iodine.age
new file mode 100644
index 0000000000000000000000000000000000000000..805e5a401d10c1d97a8353f896228820f75912ce
GIT binary patch
literal 1081
zcmZA0xvuME6a`=!nurn*4JeezI@hxuH&^lyJB}R>@svNE=Xi{r-|>(Zi2~8^22fEU
z8fd6^1!#Bz8oK)i+;c$`=Lx>OmevmQ^eJuQ+tLliwS9HH<>-j7o?fpZyga1|LDM+5
zCd$LE<kyAJK`l#@$%kM{z2P*~alEnVQ)+k&H-Ydj1QFerDh^hU<HNf)1lKU}FrjK4
z2z6}wi4j~*5uinI+~@3c8y9V^UTU=z>?3~db}%b}+?)a?^`%x`>ic1|VLu*)?H*XA
zx}k4MNttI-T`dkeXfmEPLm1~(9g{5d<m-Z41c>+eVs@D;^8Bp2qWV%3g??b{wS{pM
z)`<KjH!<uSIw(L~yYUYS^w^%x)%(6oM)L*|Y+BvWa2ZIfJKQECqjF$3m2|*dWgkAY
z+-*`A)Mcmb_<WPU)Uw_Q8Gh}FvXe5I7i}4AAGz=}E2A{g&aFm+_M8n%%ksG`l+|Oq
zVyB!XD=$3P>=Bur+_bN=jL_vK;&9(Fce;W)lIH5kj(@3f;w8?f^|aHVcBWg&%yo>1
zJ~q3W;A7c6sG<_55R3KZGRkIr1}n!f^Ai^B3an2b%+5RYasY6hy0q*?mW8U8>VwX6
z_l$Yh<mummC`t(qVRFz-E2y<4#VNB|P<s2g2%^2jfu(5%Gj<|;d!yUw7MrsOI;p`z
z*k?HsCzgrmrXfW%1W~-v(T<U5BE+8a{3oacT}Wasa!9QfUEZ1+<dB=y)ZEbqv1nfo
zaMrOI!@TXP%9^Y|GrO2W)z8khO9~<~Ns|ZC3v%n8_n^&y)6MYkEOf>A)DbkZMixRr
zr!@~9wJU1YZ_9+ls9dvC!fpzF*(QudOOHwwrGV#YN>t(%wIqZku<e+Y7RN<QP0?tO
z0}C4?VJ1kZ!gyzF7zfwhrTO0~jXojyHP1XS$BjZ#gxis?2`Fx_BA6fkvGBtPF%u%L
zw@G|*YW%*+f`poT5g8Ug9s?_Njm`=Ay@E?daWc+IMGb_b6MbvG{i&y?wW*;{>&>Pe
zjdUlQF;Dt!hXE0z$4nrLW5kngRI2w!6|dfu-^cuq%6C7%|Lc3-Ufv9wZ@?#?@4F9v
g`s?-d%Wq%*{>R^6{Q2>xIQ&8XjQsG`mmhug58NYLvH$=8

literal 0
HcmV?d00001