From 36b8f7776445d6bc904ac1b9971e6fcf45b163ff Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Fri, 9 May 2025 22:32:04 +0200
Subject: [PATCH] quitte: use unbound

---
 flake.nix                   |  1 +
 modules/unbound/default.nix | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 modules/unbound/default.nix

diff --git a/flake.nix b/flake.nix
index 1ec3f36..757d6f4 100755
--- a/flake.nix
+++ b/flake.nix
@@ -93,6 +93,7 @@
             ./modules/matrix
             ./modules/keycloak
             ./modules/monitoring
+            ./modules/unbound
 
             ./modules/nix-serve.nix
             ./modules/hedgedoc.nix
diff --git a/modules/unbound/default.nix b/modules/unbound/default.nix
new file mode 100644
index 0000000..e8819cc
--- /dev/null
+++ b/modules/unbound/default.nix
@@ -0,0 +1,17 @@
+{ ... }:
+{
+  services.unbound = {
+    enable = true;
+    settings = {
+      server = {
+        interface = [ "127.0.0.1" ];
+        access-control = [ "127.0.0.1 allow" ];
+      };
+      stub-zone = [
+        {
+          name = ".";
+        }
+      ];
+    };
+  };
+}