diff options
author | Jörg Thalheim <joerg@thalheim.io> | 2020-02-24 10:51:43 +0000 |
---|---|---|
committer | Jörg Thalheim <joerg@thalheim.io> | 2020-02-24 10:51:43 +0000 |
commit | 8cfd0032956f49a9998b2b438c09df4e274956c4 (patch) | |
tree | 89456926f600275eafaf33128f44b538700a9756 /nixos | |
parent | 56e6074c07b83cfd04384214e06aaf20ca9f4631 (diff) | |
download | nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.gz nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.bz2 nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.lz nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.xz nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.zst nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.zip |
stubby: configure cache directory
This is needed for local dnssec validation
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/networking/stubby.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/stubby.nix b/nixos/modules/services/networking/stubby.nix index b38bcd4cec05..849d266576d5 100644 --- a/nixos/modules/services/networking/stubby.nix +++ b/nixos/modules/services/networking/stubby.nix @@ -72,6 +72,7 @@ let resolution_type: GETDNS_RESOLUTION_STUB dns_transport_list: ${fallbacks} + appdata_dir: "/var/cache/stubby" tls_authentication: ${cfg.authenticationMode} tls_query_padding_blocksize: ${toString cfg.queryPaddingBlocksize} edns_client_subnet_private: ${if cfg.subnetPrivate then "1" else "0"} @@ -208,6 +209,7 @@ in CapabilityBoundingSet = "CAP_NET_BIND_SERVICE"; ExecStart = "${pkgs.stubby}/bin/stubby -C ${confFile} ${optionalString cfg.debugLogging "-l"}"; DynamicUser = true; + CacheDirectory = "stubby"; }; }; }; |