krops/krops.nix

@@ -44,7 +44,6 @@ let
       nixos-config.file = toString ./nas/configuration.nix;
       "hardware.nix".file = toString ./nas/hardware.nix;
       "n8n.nix".file = toString ./nas/nixpkgs/n8n.nix;
-      "dns.db".file = toString ./nas/dns.db;
     }
   ];
   

krops/nas/configuration.nix

@@ -32,14 +32,16 @@
       config =
         ''
         .:53 {
-          errors
-          log
-          health
-          file /var/src/dns.db git.gmem.ca
-          forward . 45.90.28.116 45.90.30.116
           cache
           bind tailscale0
         }
+        git.gmem.ca {
+         cache
+         bind tailscale0
+         template IN A  {
+          answer "{{ .Name }} 0 IN A 100.116.48.47"
+         }
+        }
     '';
     };
     pipewire = {
@@ -292,10 +294,6 @@
   virtualisation = {
     docker = {
       enable = true;
-      rootless = {
-        enable = true;
-        setSocketVariable = true;
-      };
     };
     libvirtd.enable = true;
   };
@@ -306,7 +304,7 @@
   security.acme.acceptTerms = true;
   security.acme.defaults.email = "acme@gmem.ca";
   security.acme.certs."git.gmem.ca" = {
-    domain = "*.gmem.ca";
+    domain = "git.gmem.ca";
     dnsProvider = "route53";
     credentialsFile = "/var/lib/secrets/credentials";
   };

krops/nas/dns.db

@@ -1,6 +0,0 @@
-git.gmem.ca.            IN      SOA     sns.dns.icann.org. noc.dns.icann.org. 2015082541 7200 3600 1209600 3600
-git.gmem.ca.            IN      A       100.116.48.47
-git.gmem.ca.            IN      AAAA    fd7a:115c:a1e0:ab12:4843:cd96:6274:302f
-
-gmem.ca.            IN      SOA     sns.dns.icann.org. noc.dns.icann.org. 2015082541 7200 3600 1209600 3600
-gmem.ca.			IN		NS ns-1341.awsdns-39.org. ns-1824.awsdns-36.co.uk. ns-354.awsdns-44.com. ns-682.awsdns-21.net.