Commit 222852ccb15d

Vincent Demeester <vincent@sbr.pm>
2025-12-05 11:00:28
chore: Remove legacy DNS zone files
- Complete migration to dns.nix-based zone management - Eliminate plain text zone files in favor of type-safe Nix expressions - Simplify DNS configuration in globals.nix 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 677c2fb
secrets/db.10.100.0
@@ -1,27 +0,0 @@
-$TTL    604800
-@    IN    SOA    ns1.vpn. admin.vpn. (
-                  3        ; Serial
-             604800        ; Refresh
-              86400        ; Retry
-            2419200        ; Expire
-             604800 )    ; Negative Cache TTL
-
-; name servers - NS records
-@ IN NS ns1.vpn.
-@ IN NS ns2.vpn.
-
-; 3 IN PTR california.vpn.
-; 5 IN PTR hokkaido.vpn.
-2 IN PTR ns1.vpn.
-16 IN PTR ns2.vpn.
-14 IN PTR okinawa.vpn.
-2 IN PTR shikoku.vpn.
-8 IN PTR wakasu.vpn.
-17 IN PTR aomi.vpn.
-2 IN PTR shikoku.vpn
-16 IN PTR sakhalin.vpn.
-50 IN PTR rhea.vpn.
-49 IN PTR aion.vpn.
-83 IN PTR athena.vpn.
-82 IN PTR demeter.vpn.
-81 IN PTR hass.vpn.
secrets/db.192.168.1
@@ -1,69 +0,0 @@
-$TTL    604800
-@    IN    SOA    ns1.home. admin.home. (
-                  3        ; Serial
-             604800        ; Refresh
-              86400        ; Retry
-            2419200        ; Expire
-             604800 )    ; Negative Cache TTL
-
-; name servers - NS records
-@ IN NS ns1.home.
-@ IN NS ns2.home.
-
-11 IN PTR hokkaido.home.
-17 IN PTR honshu.home.
-18 IN PTR kobe.home.
-19 IN PTR okinawa.home.
-70 IN PTR sakhalin.home.
-20 IN PTR synodine.home.
-77 IN PTR wakasu.home.
-23 IN PTR aomi.home.
-50 IN PTR rhea.home.
-49 IN PTR aion.home.
-24 IN PTR shikoku.home.
-57 IN PTR remarkable.home.
-15 IN PTR honshu.home.
-182 IN PTR demeter.home.
-182 IN PTR ns1.home.
-183 IN PTR athena.home.
-183 IN PTR ns2.home.
-181 IN PTR hass.home.
-
-; OpenShift VM
-;; Load Balancer
-120 IN PTR vm0.home.
-120 IN PTR api.ocp.home.
-120 IN PTR api-int.ocp.home.
-
-;; Masters
-121 IN PTR vm1.home.
-121 IN PTR master0.ocp.home.
-122 IN PTR vm2.home.
-122 IN PTR master1.ocp.home.
-123 IN PTR vm3.home.
-123 IN PTR master2.ocp.home.
-
-;; Workers
-124 IN PTR vm4.home.
-124 IN PTR worker1.ocp.home.
-125 IN PTR vm5.home.
-125 IN PTR worker2.ocp.home.
-126 IN PTR vm6.home.
-126 IN PTR worker3.ocp.home.
-127 IN PTR vm7.home.
-127 IN PTR worker4.ocp.home.
-128 IN PTR vm8.home.
-128 IN PTR worker5.ocp.home.
-
-;; Bootstrap machine
-129 IN PTR vm9.home.
-129 IN PTR bootstrap.ocp.home.
-
-;; k8s nodes
-130 IN PTR ubnt1.home.
-131 IN PTR ubnt2.home.
-132 IN PTR k8sn3.home.
-130 IN PTR k8sn1.home.
-131 IN PTR k8sn2.home.
-132 IN PTR k8sn3.home.
-
secrets/db.home
@@ -1,90 +0,0 @@
-$TTL    604800
-@    IN    SOA    ns1.home. admin.home. (
-                  3        ; Serial
-             604800        ; Refresh
-              86400        ; Retry
-            2419200        ; Expire
-             604800 )    ; Negative Cache TTL
-
-; name servers - NS records
-@ IN NS ns1.home.
-@ IN NS ns2.home.
-
-*.cache.home. IN A 192.168.1.70
-*.okinawa.home. IN A 192.168.1.19
-hokkaido.home. IN A 192.168.1.11
-honshu.home. IN A 192.168.1.17
-kobe.home. IN A 192.168.1.18
-ns1.home. IN A 192.168.1.182
-ns2.home. IN A 192.168.1.183
-okinawa.home. IN A 192.168.1.19
-sakhalin.home. IN A 192.168.1.70
-*.sakhalin.home IN A 192.168.1.70
-synodine.home. IN A 192.168.1.20
-wakasu.home. IN A 192.168.1.77
-*.wakasu.home IN A 192.168.1.77
-aomi.home. IN A 192.168.1.23
-*.aomi.home. IN A 192.168.1.23
-rhea.home. IN A 192.168.1.50
-*.rhea.home. IN A 192.168.1.50
-aion.home. IN A 192.168.1.49
-*.aion.home. IN A 192.168.1.49
-shikoku.home. IN A 192.168.1.24
-*.shikoku.home. IN A 192.168.1.24
-athena.home. IN A 192.168.1.183
-*.athena.home. IN A 192.168.1.183
-demeter.home. IN A 192.168.1.182
-*.demeter.home. IN A 192.168.1.182
-nagoya.home. IN A 192.168.1.80
-*.nagoya.home. IN A 192.168.1.80
-honshu.home. IN A 192.168.1.15
-*.honshu.home. IN A 192.168.1.15
-remakrable.home. IN A 192.168.1.57
-hass.home. IN A 192.168.1.181
-
-; OpenShift VMs
-;; Load balancer
-vm0.home. IN A 192.168.1.120
-api.ocp.home. IN A 192.168.1.120
-api-int.ocp.home. IN A 192.168.1.120
-*.apps.ocp.home. IN A 192.168.1.120
-
-;; Masters
-vm1.home. IN A 192.168.1.121
-master0.ocp.home. IN A 192.168.1.121
-vm2.home. IN A 192.168.1.122
-master1.ocp.home. IN A 192.168.1.122
-vm3.home. IN A 192.168.1.123
-master3.ocp.home. IN A 192.168.1.123
-
-;; Workers
-vm4.home. IN A 192.168.1.124
-worker1.ocp.home. IN A 192.168.1.124
-vm5.home. IN A 192.168.1.125
-worker2.ocp.home. IN A 192.168.1.125
-vm6.home. IN A 192.168.1.126
-worker3.ocp.home. IN A 192.168.1.126
-vm7.home. IN A 192.168.1.127
-worker4.ocp.home. IN A 192.168.1.127
-vm8.home. IN A 192.168.1.128
-worker5.ocp.home. IN A 192.168.1.128
-
-;; Bootstrap machine
-vm9.home. IN A 192.168.1.129
-bootstrap.ocp.home. IN A 192.168.1.129
-
-;; etcd records
-etcd-0.ocp.home. IN A 192.168.1.121
-etcd-1.ocp.home. IN A 192.168.1.122
-etcd-2.ocp.home. IN A 192.168.1.123
-_etcd-server-ssl._tcp.ocp.home. IN SRV 0 10 2380 etcd-0.ocp.home.
-_etcd-server-ssl._tcp.ocp.home. IN SRV 0 10 2380 etcd-1.ocp.home.
-_etcd-server-ssl._tcp.ocp.home. IN SRV 0 10 2380 etcd-2.ocp.home.
-
-;; k8s nodes
-ubnt1.home. IN A 192.168.1.130
-ubnt2.home. IN A 192.168.1.131
-k8sn1.home. IN A 192.168.1.130
-k8sn2.home. IN A 192.168.1.131
-k8sn3.home. IN A 192.168.1.132
-
secrets/db.sbr.pm
@@ -1,47 +0,0 @@
-$TTL    604800
-@    IN    SOA    ns1.sbr.pm. admin.sbr.pm. (
-                  3        ; Serial
-             604800        ; Refresh
-              86400        ; Retry
-            2419200        ; Expire
-             604800 )    ; Negative Cache TTL
-
-; name servers - NS records
-@ IN NS ns1.sbr.pm.
-@ IN NS ns2.sbr.pm.
-
-ns1.sbr.pm. IN A 192.168.1.182
-ns2.sbr.pm. IN A 192.168.1.183
-
-* 10800 IN A 167.99.17.238
-
-wakasu.sbr.pm. IN A 192.168.1.77
-*.wakasu.sbr.pm. IN A 192.168.1.77
-shikoku.sbr.pm. IN A 192.168.1.24
-*.shikoku.sbr.pm. IN A 192.168.1.24
-sakhalin.sbr.pm. IN A 192.168.1.70
-*.sakhalin.sbr.pm. IN A 192.168.1.70
-aix.sbr.pm. IN A 10.100.0.89
-*.aix.sbr.pm. IN A 10.100.0.89
-rhea.sbr.pm. IN A 192.168.1.50
-*.rhea.sbr.pm. IN A 192.168.1.50
-jellyfin.sbr.pm. IN A 192.168.1.50
-jellyseerr.sbr.pm. IN A 192.168.1.50
-sonarr.sbr.pm. IN A 192.168.1.50
-radarr.sbr.pm. IN A 192.168.1.50
-lidarr.sbr.pm. IN A 192.168.1.50
-bazarr.sbr.pm. IN A 192.168.1.50
-transmission.sbr.pm. IN A 192.168.1.50
-t.sbr.pm. IN A 192.168.1.50
-aion.sbr.pm. IN A 192.168.1.49
-*.aion.sbr.pm. IN A 192.168.1.49
-demeter.sbr.pm. IN A 192.168.1.182
-*.demeter.sbr.pm. IN A 192.168.1.182
-athena.sbr.pm. IN A 192.168.1.183
-*.athena.sbr.pm. IN A 192.168.1.183
-honshu.sbr.pm. IN A 192.168.1.15
-*.honshu.sbr.pm. IN A 192.168.1.15
-nagoya.sbr.pm. IN A 192.168.1.80
-*.nagoya.sbr.pm. IN A 192.168.1.80
-kerkouane.sbr.pm IN A 10.100.0.1    
-*.kerkouane.sbr.pm IN A 10.100.0.1    
secrets/db.vpn
@@ -1,38 +0,0 @@
-$TTL    604800
-@    IN    SOA    ns1.vpn. admin.vpn. (
-                  3        ; Serial
-             604800        ; Refresh
-              86400        ; Retry
-            2419200        ; Expire
-             604800 )    ; Negative Cache TTL
-
-; name servers - NS records
-@ IN NS ns1.vpn.
-@ IN NS ns2.vpn.
-
-*.cache.vpn. IN A 10.100.0.6
-*.massimo.vpn. IN A 10.100.0.6
-; hokkaido.vpn. IN A 10.100.0.5
-ns1.vpn. IN A 10.100.0.2
-ns2.vpn. IN A 10.100.0.16
-okinawa.vpn. IN A 10.100.0.14
-.*okinawa.vpn. IN A 10.100.0.14
-aomi.vpn. IN A 10.100.0.17
-.*aomi.vpn. IN A 10.100.0.17
-shikoku.vpn. IN A 10.100.0.2
-.*shikoku.vpn. IN A 10.100.0.2
-sakhalin.vpn. IN A 10.100.0.16
-.*sakhalin.vpn. IN A 10.100.0.16
-rhea.vpn. IN A 10.100.0.50
-*.rhea.vpn. IN A 10.100.0.50
-aion.vpn. IN A 10.100.0.49
-*.aion.vpn. IN A 10.100.0.49
-athena.vpn. IN A 10.100.0.83
-*.athena.vpn. IN A 10.100.0.83
-demeter.vpn. IN A 10.100.0.82
-*.demeter.vpn. IN A 10.100.0.82
-nagoya.vpn. IN A 10.100.0.80
-*.nagoya.vpn. IN A 10.100.0.80
-kyushu.vpn. IN A 10.100.0.19
-*.kyushu.vpn. IN A 10.100.0.19
-hass.vpn. IN A 10.100.0.81
\ No newline at end of file
globals.nix
@@ -42,50 +42,10 @@ _: {
   };
   net = {
     dns = {
-      # TODO: https://discourse.nixos.org/t/dynamic-dns-on-bind/21361
-      # TODO: https://github.com/nix-community/dns.nix
-      # Maybe switch to nsd
       cacheNetworks = [
         "192.168.1.0/24"
         "10.100.0.0/24"
       ];
-      zones = [
-        {
-          # sbr
-          name = "sbr.pm";
-          master = true;
-          slaves = [ ];
-          file = ./secrets/db.sbr.pm;
-        }
-        {
-          # home
-          name = "home";
-          master = true;
-          slaves = [ ];
-          file = ./secrets/db.home;
-        }
-        {
-          # home.reverse
-          name = "192.168.1.in-addr.arpa";
-          master = true;
-          slaves = [ ];
-          file = ./secrets/db.192.168.1;
-        }
-        {
-          # vpn
-          name = "vpn";
-          master = true;
-          slaves = [ ];
-          file = ./secrets/db.vpn;
-        }
-        {
-          # vpn.reverse
-          name = "10.100.0.in-addr.arpa";
-          master = true;
-          slaves = [ ];
-          file = ./secrets/db.10.100.0;
-        }
-      ];
     };
     vpn = {
       endpoint = "167.99.17.238";