Archived
beatzaplentyandClaude Sonnet 4.6
6cdae391f4
SSSD's dyndns_iface defaults to "*" which registers every interface's IP in IPA DNS, including all Docker bridge networks (172.x.x.x). This caused docker.sweet.home to resolve to Docker bridge IPs instead of 192.168.2.225. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
26 lines
859 B
Nix
26 lines
859 B
Nix
{ vars, ... }:
|
|
|
|
{
|
|
networking = {
|
|
hostName = "docker";
|
|
hostId = "007f0200";
|
|
useDHCP = false;
|
|
interfaces.${vars.vmLanInterface}.ipv4.addresses = [{
|
|
address = vars.dockerIp;
|
|
prefixLength = vars.lanPrefixLength;
|
|
}];
|
|
defaultGateway = { address = vars.lanGateway; interface = vars.vmLanInterface; };
|
|
nameservers = [ vars.domainControllerIp ];
|
|
};
|
|
boot.zfs.forceImportRoot = false;
|
|
|
|
# Only advertise the LAN interface to IPA DNS. Without this, SSSD registers
|
|
# every Docker bridge (172.x.x.x) as an A record for docker.sweet.home —
|
|
# the default dyndns.interface = "*" catches them all.
|
|
security.ipa.dyndns.interface = vars.lxcLanInterface; # eth0
|
|
|
|
# Preserved from the pre-refactor `docker` target — stateVersion must never
|
|
# be bumped on an already-installed machine.
|
|
system.stateVersion = "25.05";
|
|
}
|