FAQ/Pinning Nixpkgs: Difference between revisions

  environment.systemPackages = with pkgs; [

        unstable.bind

        unstable.dnsutils

        vim

  ];

services.bind.enable = true;

...

  users.users.named =

      { uid = config.ids.uids.bind;

        description = "BIND daemon user";

      };

  systemd.services.mybind = {

        description = "BIND Domain Name Server";

        unitConfig.Documentation = "man:named(8)";

        after = [ "network.target" ];

        wantedBy = [ "multi-user.target" ];

        preStart = ''

        mkdir -m 0755 -p /etc/bind

        if ! [ -f "/etc/bind/rndc.key" ]; then

          ${pkgs.unstable.bind.out}/sbin/rndc-confgen -c /etc/bind/rndc.key -u named -a -A hmac-sha256 2>/dev/null

        fi

        ${pkgs.coreutils}/bin/mkdir -p /run/named

        chown named /run/named

      '';

        serviceConfig = {

        ExecStart = "${pkgs.unstable.bind.out}/sbin/named -u named -4 -c /etc/bind/named.conf -f";

        ExecReload = "${pkgs.unstable.bind.out}/sbin/rndc -k '/etc/bind/rndc.key' reload";

        ExecStop   = "${pkgs.unstable.bind.out}/sbin/rndc -k '/etc/bind/rndc.key' stop";

      };