feat(google-tdx): disable LLMNR and MulticastDNS

- Configured resolved service, disabling LLMNR and MulticastDNS
  for improved resolution settings.

- Removed commented-out Prometheus Node config

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
This commit is contained in:
Harald Hoyer 2025-02-10 10:46:34 +01:00
parent fae9ad7f58
commit c5cdc1e4ab
Signed by: harald
GPG key ID: F519A1143B3FBE32

View file

@ -26,6 +26,13 @@
networking.firewall.allowedTCPPortRanges = [{ from = 1024; to = 65535; }];
networking.firewall.allowedUDPPortRanges = [{ from = 1024; to = 65535; }];
services.resolved.enable = true;
services.resolved.llmnr = "false";
services.resolved.extraConfig = ''
[Resolve]
MulticastDNS=no
'';
networking.useNetworkd = lib.mkDefault true;
# don't fill up the logs
@ -80,8 +87,6 @@
disabledCollectors = [
"textfile"
];
#openFirewall = true;
#firewallFilter = "-i br0 -p tcp -m tcp --dport 9100";
};
environment.systemPackages = with pkgs; [