dnsmasq: serve config from /home/dank/Containers/dnsmasq (rootless-correct)

/opt is root-owned; the established data-location pattern (see
docs/Architecture/Storage Policy.md, open-webui quadlet) is
/home/dank/Containers/<service>.

dankclaw/Caddyfile

@@ -16,6 +16,11 @@
 	email admin@franksdank.cloud
 }
 
+# --- Bare-IP access (health checks, convenience) ---
+:80 {
+	redir http://dankclaw.franksdank.cloud/ 302
+}
+
 # --- Homepage (password protected) ---
 http://dankclaw.franksdank.cloud {
 	basicauth {

dankclaw/dnsmasq/dnsmasq.container

@@ -10,7 +10,8 @@
 # configured -> 192.168.0.143), so no client needs per-device config.
 #
 # Runs on slirp4netns with port 53 published to the LAN (the same pattern as
-# open-webui). Config mounts from /opt/dnsmasq. See docs/Infrastructure/LAN-DNS.md.
+# open-webui). Config mounts from /home/dank/Containers/dnsmasq. See
+# docs/Infrastructure/LAN-DNS.md.
 
 [Unit]
 Description=dnsmasq LAN DNS container
@@ -22,8 +23,8 @@ Network=slirp4netns
 Image=localhost/dnsmasq:latest
 PublishPort=53:53/tcp
 PublishPort=53:53/udp
-Volume=/opt/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
+Volume=/home/dank/Containers/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
-Volume=/opt/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro
+Volume=/home/dank/Containers/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro
 
 [Service]
 Restart=always

dankserver/Caddyfile

@@ -15,6 +15,11 @@
 	email admin@franksdank.cloud
 }
 
+# --- Bare-IP access (health checks, convenience) ---
+:80 {
+	redir http://dankserver.franksdank.cloud/ 302
+}
+
 # --- Homepage (password protected) ---
 http://dankserver.franksdank.cloud {
 	basicauth {