about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorVladimír Čunát <v@cunat.cz>2019-05-19 14:05:54 +0200
committerVladimír Čunát <v@cunat.cz>2019-07-10 18:15:48 +0200
commit6c233963dccc95dfd25f027ea84d8656eff303a0 (patch)
tree4ba9c9e68dbe6aa3709cc119fc0825514e671ac4 /nixos
parent893541416089d2bb4b341d8a810237442fb264c9 (diff)
knot-resolver: 3.2.1 -> 4.0.0
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html

Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.

(cherry picked from commit 9efdd2e43477aa4b7e8b6d8da62e351125964991)
I'm really sorry to pull a "major" update, but the upcoming security
fixes are rather hard to backport correctly.  Please contact me in case
you run into problems when upgrading.
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/kresd.nix7
1 files changed, 5 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/kresd.nix b/nixos/modules/services/networking/kresd.nix
index ca34ff9df4ef3..fc516c01230a3 100644
--- a/nixos/modules/services/networking/kresd.nix
+++ b/nixos/modules/services/networking/kresd.nix
@@ -80,8 +80,11 @@ in
         # Syntax depends on being IPv6 or IPv4.
         (iface: if elem ":" (stringToCharacters iface) then "[${iface}]:53" else "${iface}:53")
         cfg.interfaces;
-      socketConfig.ListenDatagram = listenStreams;
-      socketConfig.FreeBind = true;
+      socketConfig = {
+        ListenDatagram = listenStreams;
+        FreeBind = true;
+        FileDescriptorName = "dns";
+      };
     };
 
     systemd.sockets.kresd-tls = mkIf (cfg.listenTLS != []) rec {