infra/tofu
Graham McIntire 28e119cee2
fix(resolvers): disable systemd-resolved stub listener instead of masking
systemd-resolved must run for host DNS (nss/resolv.conf), but its stub
listener on 127.0.0.53:53 conflicts with Unbound's bind to 0.0.0.0:53.

Replace masking with DNSStubListener=no dropin + static resolv.conf
pointing to 1.1.1.1 and 9.9.9.9, so the host can resolve without
occupying port 53.
2026-07-24 11:17:33 -05:00
..
.gitignore tofu: remove state from tracking, add gitignore, upgrade providers 2026-06-04 14:48:54 -05:00
.terraform.lock.hcl flatcar resolvers 2026-06-22 15:52:51 -05:00
blocklist.rpz flatcar resolvers 2026-06-22 15:52:51 -05:00
cloudflare.tf Migrate mcintire.me DNS from self-hosted BIND9 to Cloudflare 2026-07-24 09:14:36 -05:00
dns.tf Migrate mcintire.me DNS from self-hosted BIND9 to Cloudflare 2026-07-24 09:14:36 -05:00
flatcar-resolver.bu fix(resolvers): disable systemd-resolved stub listener instead of masking 2026-07-24 11:17:33 -05:00
flatcar-resolver2.bu fix(resolvers): disable systemd-resolved stub listener instead of masking 2026-07-24 11:17:33 -05:00
main.tf flatcar resolvers 2026-06-22 15:52:51 -05:00
porkbun.tf update 2026-04-21 12:40:18 -05:00
proxmox.tf flatcar resolvers 2026-06-22 15:52:51 -05:00
unbound.conf flatcar resolvers 2026-06-22 15:52:51 -05:00
variables.tf restore UISP server + caddy frontend, fix SSH host key regeneration, add tofu proxmox provider 2026-06-21 19:06:33 -05:00