boron: enable authoritative dns

hosts/boron.cx.ts.hillion.co.uk/default.nix

@@ -54,6 +54,11 @@
       };
     };
 
+    services.nsd.interfaces = [
+      "138.201.252.214"
+      "2a01:4f8:173:23d2::2"
+    ];
+
     ## Enable ZRAM to help with root on tmpfs
     zramSwap = {
       enable = true;
@@ -100,8 +105,10 @@
       interfaces = {
         eth0 = {
           allowedTCPPorts = lib.mkForce [
+            53 # DNS
           ];
           allowedUDPPorts = lib.mkForce [
+            53 # DNS
           ];
         };
       };

hosts/jorah.cx.ts.hillion.co.uk/default.nix

@@ -31,6 +31,11 @@
       };
     };
 
+    services.nsd.interfaces = [
+      "95.217.229.104"
+      "2a01:4f9:4b:3953::2"
+    ];
+
     services.foldingathome = {
       enable = true;
       user = "JakeH"; # https://stats.foldingathome.org/donor/id/357021

modules/locations.nix

@@ -20,6 +20,7 @@ in
       custom.locations.locations = {
         services = {
           authoritative_dns = [
+            "boron.cx.ts.hillion.co.uk"
             "jorah.cx.ts.hillion.co.uk"
           ];
           downloads = "tywin.storage.ts.hillion.co.uk";

modules/services/authoritative_dns.nix

@@ -12,11 +12,6 @@ in
     services.nsd = {
       enable = true;
 
-      interfaces = [
-        "95.217.229.104"
-        "2a01:4f9:4b:3953::2"
-      ];
-
       zones = {
         "ts.hillion.co.uk" = {
           data =