tree 01b7ad51279b9060c3c967a0061826d37dbfaf01
parent 4264b8c641109c05c4828b40cd2e01e686890903
author Lorenz Brun <lorenz@monogon.tech> 1685614965 +0200
committer Lorenz Brun <lorenz@monogon.tech> 1686661433 +0000

m/node: clean up DNS service

The primary change in here is that CoreDNS now only listens on the
loopback interface by default.
This fixes #217 as it cannot be accessed from the outside anymore.
Since the containers do not share the host network namespace, they can
now no longer access the DNS service. This is solved by introducing a
new Network Service API to add listener IPs and using a link-local IP,
169.254.77.53 for the container DNS.
While at it, I cleaned up various parts of the DNS code.

Change-Id: Id7b618f62690032db335e8478b9de84410c210a1
Reviewed-on: https://review.monogon.dev/c/monogon/+/1759
Tested-by: Jenkins CI
Reviewed-by: Serge Bazanski <serge@monogon.tech>