From 4cb38e0b5873eda411c59719742df36f45c4839e Mon Sep 17 00:00:00 2001
From: toufic ar <contact@toufy.me>
Date: Mon, 21 Sep 2026 18:42:48 +0300
Subject: aphrodite: remove search, add dns

---
 aphrodite/dns/default.nix | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 aphrodite/dns/default.nix

(limited to 'aphrodite/dns/default.nix')

diff --git a/aphrodite/dns/default.nix b/aphrodite/dns/default.nix
new file mode 100644
index 0000000..6dc664d
--- /dev/null
+++ b/aphrodite/dns/default.nix
@@ -0,0 +1,38 @@
+{config, ...}: let
+  domain = config.customOps.domain.fqdn;
+in {
+  networking.firewall = {
+    allowedTCPPorts = [53 853];
+    allowedUDPPorts = [53];
+  };
+  services = {
+    kresd = {
+      enable = true;
+      listenPlain = [
+        "[::]:53"
+        "0.0.0.0:53"
+      ];
+      listenTLS = [
+        "[::]:853"
+        "0.0.0.0:853"
+      ];
+    };
+    doh-server = {
+      enable = true;
+      settings = {
+        path = "/";
+        upstream = ["udp:127.0.0.1:53"];
+      };
+    };
+    nginx.virtualHosts."dns.${domain}" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8053";
+        extraConfig = ''
+          proxy_http_version 1.1;
+        '';
+      };
+    };
+  };
+}
-- 
cgit v1.3.1