helm/profiles/dns/default.nix

{ config, pkgs, lib, ... }:
{
  services.dnsmasq.enable = true;
  services.dnsmasq.extraConfig = ''
    domain-needed
    no-resolv
    local=/lan/
    local=/moss/
    cache-size=5000
    addn-hosts=/etc/adblock.hosts 
  ''; # find a way to make adblock hosts reproducible and updateable
  services.dnsmasq.servers = [ "45.90.30.49" "45.90.28.49" "1.1.1.1" "8.8.8.8" ];
  networking.hosts = { "192.168.1.240" = [ "mossnet.lan" "links.mossnet.lan" "read.mossnet.lan" "stats.mossnet.lan" "music.mossnet.lan" "rss.mossnet.lan" "tasks.mossnet.lan" "file.mossnet.lan" "books.mossnet.lan" ]; };
  networking.firewall.allowedTCPPorts = [ 53 ];
  networking.firewall.allowedUDPPorts = [ 53 ];
}