From bf9819c34ccd94618da95589613faebb6e3a080c Mon Sep 17 00:00:00 2001
From: Ruben Hoenle <git@hoenle.xyz>
Date: Wed, 13 Nov 2024 01:31:46 +0100
Subject: [PATCH] chore(services): remove unbound service

---
 hosts.nix             |  3 +--
 services/services.nix |  1 -
 services/unbound.nix  | 38 --------------------------------------
 3 files changed, 1 insertion(+), 41 deletions(-)
 delete mode 100644 services/unbound.nix

diff --git a/hosts.nix b/hosts.nix
index 6dfe778..924a39f 100644
--- a/hosts.nix
+++ b/hosts.nix
@@ -8,7 +8,7 @@
       {
         networking.hostName = "mandalore";
 
-        virtualisation.podman.enable = false;
+        #virtualisation.podman.enable = true;
 
         ruben = {
           paperless.enable = true;
@@ -22,7 +22,6 @@
         services = {
           minecraft-server.enable = false;
           nginx.enable = false;
-          unbound.enable = false;
         };
 
         ruben.bk-nc-backup.enable = true;
diff --git a/services/services.nix b/services/services.nix
index 4b74906..462046f 100644
--- a/services/services.nix
+++ b/services/services.nix
@@ -4,7 +4,6 @@
     ./fileserver.nix
     ./gitserver.nix
     ./ssh.nix
-    ./unbound.nix
     ./nginx.nix
     ./paperless.nix
     ./phone-rsync.nix
diff --git a/services/unbound.nix b/services/unbound.nix
deleted file mode 100644
index d0b7406..0000000
--- a/services/unbound.nix
+++ /dev/null
@@ -1,38 +0,0 @@
-{ lib, config, ... }:
-{
-  /* open firewall ports */
-  networking.firewall = lib.mkIf config.services.unbound.enable {
-    allowedTCPPorts = [ 53 ];
-    allowedUDPPorts = [ 53 ];
-  };
-
-  services.unbound = {
-    resolveLocalQueries = false;
-    settings = {
-      server = {
-        interface = [
-          "0.0.0.0@53"
-          "::@53"
-        ];
-        access-control = [
-          "127.0.0.0/8      allow" # allow ipv4 from localhost
-          "192.168.178.0/24 allow" # allow ipv4 from local network
-          "::1/128          allow" # allow ipv6 from localhost
-          "::0/0            allow" # allow all ipv6
-        ];
-        local-data = [
-          "\"git.hoenle.xyz A 192.168.178.5\""
-
-          "\"mandalore       A 192.168.178.5\""
-          "\"scarif       A 192.168.178.4\""
-
-          "\"fritz.box       A 192.168.178.1\""
-          "\"fritz.repeater  A 192.168.178.3\""
-
-          "\"printer01           A 192.168.178.20\""
-          "\"printer01.fritz.box A 192.168.178.20\""
-        ];
-      };
-    };
-  };
-}