nixpkgs/nixos/modules/services/networking
gwitmond bd52618c9d
nixos: add option for bind to not resolve local queries (#29503)
When the user specifies the networking.nameservers setting in the
configuration file, it must take precedence over automatically
derived settings.

The culprit was services.bind that made the resolver set to
127.0.0.1 and ignore the nameserver setting.

This patch adds a flag to services.bind to override the nameserver
to localhost. It defaults to true. Setting this to false prevents the
service.bind and dnsmasq.resolveLocalQueries settings from
overriding the users' settings.

Also, when the user specifies a domain to search, it must be set in
the resolver configuration, even if the user does not specify any
nameservers.

(cherry picked from commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6)

This commit was accidentally merged to 17.09 but was intended for
master. This is the cherry-pick to master.
2017-09-18 22:54:29 +02:00
..
firefox firefox syncserver service: run as non-root user by default 2017-08-12 14:42:50 +01:00
ircd-hybrid treewide: use boolToString function 2017-04-11 18:18:53 +02:00
keepalived keepalived service: init (#22755) 2017-04-20 12:50:59 +01:00
ssh ssh service: add sftpFlags option 2017-09-18 21:52:07 +02:00
amuled.nix
aria2.nix Fix indentation. Fix openPorts option default to false. 2017-04-27 17:13:27 +03:00
asterisk.nix service.asterisk: add package option 2017-02-02 15:16:00 +01:00
atftpd.nix nixos/atftpd: various improvements 2016-10-17 16:20:24 +02:00
autossh.nix
avahi-daemon.nix avahi-daemon service: add cacheEntriesMax option 2017-08-04 02:10:11 +02:00
bind.nix nixos: add option for bind to not resolve local queries (#29503) 2017-09-18 22:54:29 +02:00
bird.nix bird service: add bird to systemPackages 2016-12-28 06:35:31 +01:00
bitlbee.nix bitlbee service: Add option to load libpurple plugins into bitlbee 2017-07-16 14:19:39 +01:00
btsync.nix treewide: use boolToString function 2017-04-11 18:18:53 +02:00
charybdis.nix charybdis service: add option to configure MOTD (#25512) 2017-05-25 23:28:50 +02:00
chrony.nix nixos.chrony: remove generatecommandkey option 2017-02-07 18:01:58 +01:00
cjdns.nix cjdns service: allow daemon to drop privileges 2017-02-05 04:54:26 +01:00
cntlm.nix cntlm service: cleanup non working config options (#26578) 2017-06-15 12:11:48 +02:00
connman.nix connman: disable connman-vpn by default (#18323) 2016-09-25 08:02:29 +02:00
consul.nix
coturn.nix coturn service: Fix coturn to properly come up (#29415) 2017-09-18 14:54:32 +02:00
dante.nix dante service: fix config option type 2016-12-10 20:35:41 +01:00
ddclient.nix ddclient nixos module: follow best practice for running daemons 2017-08-13 21:56:48 +08:00
dhcpcd.nix nixos/networking: network is online if default gw set 2017-09-18 14:51:38 +02:00
dhcpd.nix nixos, dhcpd: make machines assignable 2017-02-27 10:52:21 +01:00
dnschain.nix dnschain: allow different bind and external addresses 2017-06-03 12:24:04 +02:00
dnscrypt-proxy.nix nixos/dnscrypt-proxy: default to random upstream resolver 2017-08-10 01:19:17 +02:00
dnscrypt-proxy.xml nixos/dnscrypt-proxy docs: reword section on forwarding 2017-03-10 18:54:52 +01:00
dnscrypt-wrapper.nix dnscrypt-wrapper module: fix permissions and options 2017-09-06 15:27:05 +02:00
dnsmasq.nix nixos: add option for bind to not resolve local queries (#29503) 2017-09-18 22:54:29 +02:00
ejabberd.nix
fakeroute.nix fakeroute: add service 2016-11-23 15:23:10 +01:00
fan.nix
ferm.nix nixos/treewide: remove boolean examples for options 2017-03-17 23:36:19 +01:00
fireqos.nix nixos/fireqos: add service 2017-09-09 00:29:46 +02:00
firewall.nix nixos/firewall: clean up rpfilter rules properly 2017-05-29 17:26:34 +02:00
flannel.nix flannel service: fix enable expression 2017-01-22 21:58:39 +01:00
flashpolicyd.nix
freenet.nix
gale.nix Fixing a bunch of issues 2017-01-29 01:58:12 -06:00
gateone.nix
gdomap.nix
git-daemon.nix
gnunet.nix
gogoclient.nix
gvpe.nix gpve service: network-interfaces.target -> network.target 2016-09-13 11:19:22 +02:00
haproxy.nix
heyefi.nix
hostapd.nix hostapd dependency fix for https://github.com/nixos/nixpkgs/issues/16090 (#26573) 2017-06-14 16:44:46 +02:00
htpdate.nix nixos: add htpdate module 2016-09-23 02:02:20 +10:00
i2p.nix
i2pd.nix nixos, i2pd: nat option, default true 2017-09-12 10:13:29 +02:00
iodine.nix
iwd.nix iwd: init at unstable-2017-04-21 2017-05-21 11:05:35 +01:00
keybase.nix kbfs service: init (#25610) 2017-05-22 08:14:12 +08:00
kippo.nix nixos: use types.lines for extraConfig 2016-10-23 19:41:43 +02:00
kresd.nix add kresd service with basic options 2017-01-25 18:46:28 +01:00
lambdabot.nix
libreswan.nix lib: introduce imap0, imap1 (#25543) 2017-07-04 23:29:23 +01:00
lldpd.nix lldpd: 0.9.7 -> 0.9.8 2017-08-27 02:33:32 +02:00
logmein-hamachi.nix
mailpile.nix
matterbridge.nix matterbridge, modules/matterbridge: init at 1.1.0 2017-09-10 08:57:28 -07:00
minidlna.nix
miniupnpd.nix
miredo.nix miredo: Improve service description 2017-05-18 15:57:26 +02:00
mjpg-streamer.nix
mosquitto.nix nixos/mosquitto: Fix instructions for password gen 2017-08-06 15:54:36 -07:00
mstpd.nix
murmur.nix murmur service: fix typos from #24830 2017-04-14 11:05:42 +02:00
namecoind.nix namecoin service: fix typo 2017-09-15 23:08:53 +02:00
nat.nix nixos/networking/nat: add option for protocol 2017-08-04 17:03:05 +02:00
networkmanager.nix networkmanager_iodine: init at 1.2.0 2017-08-30 02:58:29 +02:00
nftables.nix nftables: adds information regarding nftables and Docker (#24326) 2017-03-25 16:34:02 +01:00
ngircd.nix
nix-serve.nix
nntp-proxy.nix nntp-proxy module: use enum 2016-11-16 22:36:53 +09:00
nsd.nix nsd: Send stderr to /dev/null 2017-06-18 15:31:34 +03:00
ntopng.nix
ntpd.nix ntp: make timesyncd the new default 2016-12-17 00:00:45 +01:00
nylon.nix nixos: nylon, use named instances 2017-01-30 20:32:06 +01:00
oidentd.nix oidentd service: network-interfaces.target -> network.target 2016-09-13 11:19:22 +02:00
openfire.nix openfire service: more informative assertion failure message 2016-12-10 20:35:43 +01:00
openntpd.nix nixos.openntpd: don't spam systemd journal 2017-02-20 22:35:51 +01:00
openvpn.nix Revert "openvpn service: source up/down scripts" 2017-04-26 12:32:59 -04:00
ostinato.nix
pdns-recursor.nix pdns-recursor: add service 2017-01-23 17:57:48 +01:00
pdnsd.nix
polipo.nix
powerdns.nix powerdns: removed PrivateTmp=true in serviceConfig 2016-10-01 12:27:23 -04:00
pptpd.nix
prayer.nix Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
privoxy.nix privoxy service: remove static uid 2016-12-05 13:37:08 +01:00
prosody.nix treewide: use boolToString function 2017-04-11 18:18:53 +02:00
quagga.nix nixos/treewide: remove boolean examples for options 2017-03-17 23:36:19 +01:00
quassel.nix Fix typo introduced by #22677 2017-02-15 23:44:11 +00:00
racoon.nix
radicale.nix radicale: 1.1.4 -> 2.1.2 2017-08-13 17:23:43 +02:00
radvd.nix
rdnssd.nix
redsocks.nix redsocks module: initialize 2017-02-09 18:01:14 +01:00
resilio.nix resilio: remove systemd user service 2017-06-02 21:25:21 +01:00
rpcbind.nix rpcbind service: use upstream systemd unit 2017-02-01 02:45:19 +03:00
sabnzbd.nix
searx.nix searx: 0.11.0 -> 0.12.0 2017-08-01 06:16:03 +02:00
seeks.nix
shairport-sync.nix
shout.nix
skydns.nix etcd: make all service using etc go to 127.0.0.1:2379 by default 2016-11-11 23:11:54 +01:00
smokeping.nix smokeping service: restart on-failure 2017-04-12 15:23:19 +02:00
sniproxy.nix
softether.nix softether: improve service dependencies 2016-09-13 11:19:22 +02:00
spiped.nix
squid.nix squid service: intial service based on default config 2017-09-09 12:44:46 +02:00
sslh.nix treewide: use boolToString function 2017-04-11 18:18:53 +02:00
strongswan.nix Strongswan after network-online instead of network 2017-07-17 20:17:58 +02:00
supplicant.nix nixos/wpa_supplicant: use literalExample 2017-09-15 20:27:48 +02:00
supybot.nix
syncthing.nix syncthing: use service files from upstream 2016-10-19 21:20:57 +02:00
tcpcrypt.nix tcpcrypt service: remove use of network-interfaces.target 2016-09-13 11:19:22 +02:00
teamspeak3.nix
tftpd.nix nixos/tftpd: change default dir from /home/tftp to /srv/tftp 2016-10-25 17:20:52 +02:00
tinc.nix nixos/tinc: Fix tinc cli wrapper for tinc 1.0. 2017-09-17 10:46:12 +02:00
tox-bootstrapd.nix
toxvpn.nix toxvpn: 20161230 -> 2017-06-25 2017-06-25 20:17:20 -03:00
tvheadend.nix
unbound.nix nixos: use types.lines for extraConfig 2016-10-23 19:41:43 +02:00
unifi.nix unifi: add options to control JVM heap size 2017-08-04 02:12:31 +02:00
vsftpd.nix vsftpd: Expose the no_anon_password flag. 2017-03-19 01:53:29 +00:00
wakeonlan.nix
websockify.nix
wicd.nix wicd: get closer to upstream service definition 2016-09-13 11:19:22 +02:00
wireguard.nix wireguard: convert "table" to an interface option 2017-08-08 01:45:19 +02:00
wpa_supplicant.nix Added option networking.wireless.networks.*.priority 2017-01-07 20:23:12 +08:00
xinetd.nix nixos: use types.lines for extraConfig 2016-10-23 19:41:43 +02:00
xl2tpd.nix
xrdp.nix xrdp: environment.pathsToLink from xserver.nix 2017-05-02 21:08:07 +00:00
zerobin.nix treewide: minor format / style / documentation fixes 2016-09-13 11:19:22 +02:00
zerotierone.nix
znc.nix Merge pull request #29171 from vaibhavsagar/znc-open-firewall 2017-09-10 14:34:29 +01:00