Vezpi/Blog
1
0
Fork 0
Code Issues 2 Pull Requests Actions Wiki Activity

Auto-update blog content from Obsidian: 2025-10-17 19:30:58
All checks were successful
Blog Deployment / Check-Rebuild (push) Successful in 6s
Details
Blog Deployment / Build (push) Has been skipped
Details
Blog Deployment / Deploy-Staging (push) Successful in 10s
Details
Blog Deployment / Test-Staging (push) Successful in 2s
Details
Blog Deployment / Merge (push) Successful in 6s
Details
Blog Deployment / Deploy-Production (push) Successful in 10s
Details
Blog Deployment / Test-Production (push) Successful in 2s
Details
Blog Deployment / Clean (push) Has been skipped
Details
Blog Deployment / Notify (push) Successful in 3s
Details

Browse Source
This commit is contained in:
Gitea Actions
2025-10-17 19:30:58 +00:00
parent 67480f64f4
commit 0a76af4175
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
content/post/13-migration-opnsense-proxmox-highly-available.md
View File

@@ -249,12 +249,12 @@ Let's configure Unbound, in `Services` > `Unbound DNS` > `General`:
I don't really modify advanced settings because I don't really know what I'm doing... I don't really modify advanced settings because I don't really know what I'm doing...
Then I configure a bunch of host overrides, this is custom DNS record you want for your network. Here I will define my Proxmox nodes with their static IP addresses: Then I configure a bunch of host overrides in `Services` > `Unbound DNS` > `Overrides`, this is custom DNS record you want for your network. Here I will define my Proxmox nodes with their static IP addresses:
![opnsense-add-host-override.png](img/opnsense-add-host-override.png) ![opnsense-add-host-override.png](img/opnsense-add-host-override.png)
As I set earlier the `Local Zone Type` to `static`, the DNS server will reply **NXDOMAIN** for anything not known for the local domain. For that reason, I need to add every subdomain served by my internal Traefik pointing to my reverse proxy (OPNsense in my current setup). As I set earlier the `Local Zone Type` to `static`, the DNS server will reply **NXDOMAIN** for anything not known for the local domain. For that reason, I need to add every subdomain served by my internal Traefik pointing to my reverse proxy (OPNsense in my current setup).
Finally I configure the blocklist in `Services` > `Unbound DNS` > `Blocklist`
@@ -266,3 +266,8 @@ As I set earlier the `Local Zone Type` to `static`, the DNS server will reply **
### mDNS Repeater ### mDNS Repeater
## Verify
DNS blocklist