about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorJörg Thalheim <joerg@thalheim.io>2020-02-24 10:51:43 +0000
committerJörg Thalheim <joerg@thalheim.io>2020-02-24 10:51:43 +0000
commit8cfd0032956f49a9998b2b438c09df4e274956c4 (patch)
tree89456926f600275eafaf33128f44b538700a9756 /nixos
parent56e6074c07b83cfd04384214e06aaf20ca9f4631 (diff)
downloadnixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.gz
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.bz2
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.lz
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.xz
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.tar.zst
nixlib-8cfd0032956f49a9998b2b438c09df4e274956c4.zip
stubby: configure cache directory
This is needed for local dnssec validation
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/stubby.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/stubby.nix b/nixos/modules/services/networking/stubby.nix
index b38bcd4cec05..849d266576d5 100644
--- a/nixos/modules/services/networking/stubby.nix
+++ b/nixos/modules/services/networking/stubby.nix
@@ -72,6 +72,7 @@ let
     resolution_type: GETDNS_RESOLUTION_STUB
     dns_transport_list:
       ${fallbacks}
+    appdata_dir: "/var/cache/stubby"
     tls_authentication: ${cfg.authenticationMode}
     tls_query_padding_blocksize: ${toString cfg.queryPaddingBlocksize}
     edns_client_subnet_private: ${if cfg.subnetPrivate then "1" else "0"}
@@ -208,6 +209,7 @@ in
         CapabilityBoundingSet = "CAP_NET_BIND_SERVICE";
         ExecStart = "${pkgs.stubby}/bin/stubby -C ${confFile} ${optionalString cfg.debugLogging "-l"}";
         DynamicUser = true;
+        CacheDirectory = "stubby";
       };
     };
   };