chore: split nixos and opentofu

nixos/modules/apps/bind9/db.depeuter.dev

@@ -0,0 +1,45 @@
+$TTL    604800
+@               IN      SOA     ns1 admin (
+                                 15 ; Serial
+                             604800 ; Refresh
+                              86400 ; Retry
+                            2419200 ; Expire
+                             604800 )       ; Negative Cache TTL
+
+; Name servers - NS records
+                IN      NS      ns1
+;                IN      NS      ns2
+
+ns1             IN      A       192.168.0.91
+;ns2             IN      A       192.158.0.X
+
+; Hostnames
+hugo.kmtl       IN      A       192.168.0.11
+
+ingress.kmtl    IN      A       192.168.0.10
+ingress.kmtl    IN      AAAA    fe80::be24:11ff:fed6:842a
+
+; Core services
+cloud           IN      A       192.168.0.10
+git             IN      A       78.23.37.117
+home            IN      A       192.168.0.10
+jelly           IN      CNAME   ingress.kmtl
+vault           IN      A       192.168.0.10
+
+; Production VM
+books           IN      A       192.168.0.31
+calibre         IN      A       192.168.0.31
+
+; Production VM - Arr
+bazarr          IN      A       192.168.0.33
+prowlarr        IN      A       192.168.0.33
+qb              IN      A       192.168.0.33
+radarr          IN      A       192.168.0.33
+sonarr          IN      A       192.168.0.33
+
+; Development VM
+plex            IN      A       192.168.0.91
+
+; Catchalls
+*.production    IN      A        192.168.0.31
+*.development   IN      A        192.168.0.91

nixos/modules/apps/bind9/default.nix

@@ -0,0 +1,54 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.homelab.apps.bind9;
+in {
+  options.homelab.apps.bind9.enable = lib.mkEnableOption "ISC BIND 9 (Docker)";
+
+  config = lib.mkIf cfg.enable {
+    homelab.virtualisation.containers.enable = true;
+
+    environment.etc = {
+      "bind/named.conf" = {
+        source = ./named.conf;
+        mode = "0555";
+      };
+      "bind/named.conf.options" = {
+        source = ./named.conf.options;
+        mode = "0555";
+      };
+      "bind/named.conf.local" = {
+        source = ./named.conf.local;
+        mode = "0555";
+      };
+      "bind/zones/db.depeuter.dev" = {
+        source = ./db.depeuter.dev;
+        mode = "0555";
+      };
+    };
+
+    virtualisation.oci-containers.containers.bind9 = {
+      hostname = "bind9";
+      #image = "internetsystemsconsortium/bind9:9.20"; # Current stable
+      image = "ubuntu/bind9"; # Current stable
+      autoStart = true;
+      ports = [
+        "53:53/udp"
+        "53:53/tcp"
+        "953:953/tcp"
+      ];
+      extraOptions = [
+      ];
+      environment = {
+      };
+      volumes = [
+        "/etc/bind:/etc/bind" # For configuration, your `named.conf` lives here
+        "bind9-cache:/var/cache/bind"
+        #"...:/var/lib/bind" # Secondary zones
+        "bind9-logs:/var/log" # Logfiles
+      ];
+      labels = {
+      };
+    };
+  };
+}

nixos/modules/apps/bind9/named.conf

@@ -0,0 +1,2 @@
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";

nixos/modules/apps/bind9/named.conf.local

@@ -0,0 +1,4 @@
+zone "depeuter.dev" {
+    type primary;
+    file "/etc/bind/zones/db.depeuter.dev";
+};

nixos/modules/apps/bind9/named.conf.options

@@ -0,0 +1,35 @@
+http local {
+        endpoints { "/dns-query"; };
+};
+
+acl bogusnets {
+};
+
+acl trusted {
+        192.168.0.0/16;
+};
+
+options {
+        directory "/var/cache/bind";
+
+        version "not currently available";
+
+        listen-on { any; };
+        listen-on-v6 { any; };
+        listen-on tls ephemeral { any; };
+        listen-on-v6 tls ephemeral { any; };
+        listen-on tls ephemeral http local { any; };
+        listen-on-v6 tls ephemeral http local { any; };
+
+        recursion yes;
+        forwarders {
+                9.9.9.9;
+                149.112.112.112;
+        };
+        forward only;
+
+        allow-query { any; };
+        allow-recursion { any; };
+        allow-transfer { none; };
+        blackhole { bogusnets; };
+};