From e6ead602f0c82594c138f659f3ecec1924ac7736 Mon Sep 17 00:00:00 2001
From: Yureka <yuka@yuka.dev>
Date: Thu, 11 Jul 2024 02:05:58 +0200
Subject: [PATCH] builders get a special treatment for dns64

---
 services/baremetal-builder/default.nix | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/services/baremetal-builder/default.nix b/services/baremetal-builder/default.nix
index 3ada5dc..6734bcc 100644
--- a/services/baremetal-builder/default.nix
+++ b/services/baremetal-builder/default.nix
@@ -91,7 +91,20 @@ in
     deployment.targetHost = "2a01:584:11::1:${toString cfg.num}";
     deployment.tags = [ "builders" ];
 
-    networking.nameservers = lib.mkForce ["2001:4860:4860::6464"]; # todo: other dns64
+    # Why can't we have nice things? https://bugs.openjdk.org/browse/JDK-8170568
+    services.coredns = {
+      enable = true;
+      config = ''
+        . {
+          bind lo
+          forward . 2001:4860:4860::6464
+          template ANY A { rcode NOERROR }
+        }
+      '';
+    };
+    services.resolved.enable = false;
+    networking.resolvconf.useLocalResolver = true;
+
 
     bagel.sysadmin.enable = true;