pyrox.dev
nixos/bind: Fix cacheNetworks option (#335832)
authored by
Peter Simons
and committed by
GitHub
120e7179
f077f710
+3
-1
nixos/doc/manual/release-notes/rl-2411.section.md
+3
-1
nixos/doc/manual/release-notes/rl-2411.section.md
···
900
901
- `freecad` now supports addons and custom configuration in nix-way, which can be used by calling `freecad.customize`.
902
903
+
- `bind.cacheNetworks` now only controls access for recursive queries, where it previously controlled access for all queries.
904
+
905
+
## Detailed migration information {#sec-release-24.11-migration}
906
907
### `sound` options removal {#sec-release-24.11-migration-sound}
908
+1
-4
nixos/modules/services/networking/bind.nix
+1
-4
nixos/modules/services/networking/bind.nix
···
38
description = ''
39
List of address ranges allowed to query this zone. Instead of the address(es), this may instead
40
contain the single string "any".
41
-
42
-
NOTE: This overrides the global-level `allow-query` setting, which is set to the contents
43
-
of `cachenetworks`.
44
'';
45
default = [ "any" ];
46
};
···
65
options {
66
listen-on { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.listenOn} };
67
listen-on-v6 { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.listenOnIpv6} };
68
-
allow-query { cachenetworks; };
69
blackhole { badnetworks; };
70
forward ${cfg.forward};
71
forwarders { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.forwarders} };
···
38
description = ''
39
List of address ranges allowed to query this zone. Instead of the address(es), this may instead
40
contain the single string "any".
41
'';
42
default = [ "any" ];
43
};
···
62
options {
63
listen-on { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.listenOn} };
64
listen-on-v6 { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.listenOnIpv6} };
65
+
allow-query-cache { cachenetworks; };
66
blackhole { badnetworks; };
67
forward ${cfg.forward};
68
forwarders { ${lib.concatMapStrings (entry: " ${entry}; ") cfg.forwarders} };