From 3d95f2c784004aa9027459239e27b0f97440e6d5 Mon Sep 17 00:00:00 2001
From: Felix Albrigtsen <felix@albrigtsen.it>
Date: Sat, 24 Jan 2026 01:21:56 +0100
Subject: [PATCH] nsd.conf: minor changes and notes

---
 nsd.conf.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nsd.conf.nix b/nsd.conf.nix
index 6ded981..650551d 100644
--- a/nsd.conf.nix
+++ b/nsd.conf.nix
@@ -10,6 +10,9 @@ pkgs.writeText "nsd.conf" (
         logfile: /var/log/nsd.log
         database: "" # disable database
         minimal-responses: yes
+        rrl-ratelimit: 200
+        rrl-ipv4-prefix-length: 32
+        # TODO: "metrics-enable" enables prometheus metrics
 
     remote-control:
         control-enable: yes
@@ -22,6 +25,7 @@ pkgs.writeText "nsd.conf" (
         zone:
             name: "${name}"
             zonefile: "${name}.zone"
+            # TODO: Should we NOTIFY secondary servers?
             # Allow transfers:
             # ns1.ntnu.no
             provide-xfr: 129.241.0.208 NOKEY