Skip to content

Bind

services.bind.blockedNetworks

What networks are just blocked.

Type: list of string

Default

[ ]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.cacheNetworks

What networks are allowed to use us as a resolver. Note that this is for recursive queries -- all networks are allowed to query zones configured with the zones option by default (although this may be overridden within each zone's configuration, via the allowQuery option). It is recommended that you limit cacheNetworks to avoid your server being used for DNS amplification attacks.

Type: list of string

Default

["127.0.0.0/24""::1/128"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.configFile

Overridable config file to use for named. By default, that generated by nixos.

Type: path

Default

confFile

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.directory

Working directory of BIND. Type: string

Default

"/run/named"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.enable

Whether to enable BIND domain name server. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.extraConfig

Extra lines to be added verbatim to the generated named configuration file.

Type: strings concatenated with "\n"

Default

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.extraOptions

Extra lines to be added verbatim to the options section of the generated named configuration file.

Type: strings concatenated with "\n"

Default

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.forward

Whether to forward 'first' (try forwarding but lookup directly if forwarding fails) or 'only'.

Type: one of "first", "only"

Default

"first"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.forwarders

List of servers we should forward requests to.

Type: list of string

Default

config.networking.nameservers

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.ipv4Only

Only use ipv4, even if the host supports ipv6.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.listenOn

Interfaces to listen on.

Type: list of string

Default

["any"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.listenOnIpv6

Ipv6 interfaces to listen on.

Type: list of string

Default

["any"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.package

The bind package to use. Type: package

Default

pkgs.bind

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones

List of zones we claim authority over.

Type: (attribute set of (submodule)) or (list of (attribute set)) convertible to it

Default

[ ]

Example

{"example.com" = {extraConfig = "";file = "/var/dns/example.com";master = false;masters = ["192.168.0.1"];slaves = [ ];};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.allowQuery

List of address ranges allowed to query this zone. Instead of the address(es), this may instead contain the single string "any".

NOTE: This overrides the global-level allow-query setting, which is set to the contents of cachenetworks.

Type: list of string

Default

["any"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.extraConfig

Extra zone config to be appended at the end of the zone section. Type: string

Default

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.file

Zone file resource records contain columns of data, separated by whitespace, that define the record. Type: string or path

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.master

Master=false means slave server Type: boolean

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.masters

List of servers for inclusion in stub and secondary zones. Type: list of string

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.name

Name of the zone. Type: string

Default

"‹name›"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix

services.bind.zones.<name>.slaves

Addresses who may request zone transfers. Type: list of string

Default

[ ]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/bind.nix