git.iko.soy/typeable/nixpkgs
on master help sign in
doc/release-notes: mention pdns-recursor options changes
commitbad701b1d3f28345cfeef0c3950a5d5b7bd06a1f authorrnhmjoj <rnhmjoj@inventati.org> dateWed 13 Apr 2022, 23:20 (5 years ago) parentfe27976
2 files changed+31
compare with master
unifiedsplit
nixos/doc/manual/from_md/release-notes/rl-2205.section.xml+25 nixos/doc/manual/release-notes/rl-2205.section.md+6
nixos/doc/manual/from_md/release-notes/rl-2205.section.xml+25
@@ -479,6 +479,31 @@
479479 relying on the insecure behaviour before upgrading.
480480 </para>
481481 </listitem>
482+ <listitem>
483+ <para>
484+ In the PowerDNS Recursor module
485+ (<literal>services.pdns-recursor</literal>), default values of
486+ several IP address-related NixOS options have been updated to
487+ match the default upstream behavior. In particular, Recursor
488+ by default will:
489+ </para>
490+ <itemizedlist spacing="compact">
491+ <listitem>
492+ <para>
493+ listen on (and allows connections from) both IPv4 and IPv6
494+ addresses
495+ (<literal>services.pdns-recursor.dns.address</literal>,
496+ <literal>services.pdns-recursor.dns.allowFrom</literal>);
497+ </para>
498+ </listitem>
499+ <listitem>
500+ <para>
501+ allow only local connections to the REST API server
502+ (<literal>services.pdns-recursor.api.allowFrom</literal>).
503+ </para>
504+ </listitem>
505+ </itemizedlist>
506+ </listitem>
482507 <listitem>
483508 <para>
484509 <literal>openssh</literal> has been update to 8.9p1, changing
nixos/doc/manual/release-notes/rl-2205.section.md+6
@@ -154,6 +154,12 @@ In addition to numerous new and upgraded packages, this release has the followin
154154
155155- `services.kubernetes.scheduler.{port,address}` now set `--secure-port` and `--bind-address` instead of `--port` and `--address`, since the former have been deprecated and are no longer functional in kubernetes>=1.23. Ensure that you are not relying on the insecure behaviour before upgrading.
156156
157+- In the PowerDNS Recursor module (`services.pdns-recursor`), default values of several IP address-related NixOS options have been updated to match the default upstream behavior.
158+ In particular, Recursor by default will:
159+ - listen on (and allows connections from) both IPv4 and IPv6 addresses
160+ (`services.pdns-recursor.dns.address`, `services.pdns-recursor.dns.allowFrom`);
161+ - allow only local connections to the REST API server (`services.pdns-recursor.api.allowFrom`).
162+
157163- `openssh` has been update to 8.9p1, changing the FIDO security key middleware interface.
158164
159165- `services.k3s.enable` no longer implies `systemd.enableUnifiedCgroupHierarchy = false`, and will default to the 'systemd' cgroup driver when using `services.k3s.docker = true`.