# dnsmasq — LAN DNS for the homelab.
#
# Runs in a rootless podman quadlet on dankclaw (192.168.0.143) with port 53
# published to the LAN. Serves the flat franksdank.cloud / franksdank.casa
# name scheme from addn-hosts (one A record per Caddy vhost); everything else
# goes to the pinned upstream resolvers. The SURFboard G36 router hands this
# server out to DHCP clients, so LAN devices resolve service names without
# per-device config. See docs/Infrastructure/LAN-DNS.md.

# The slirp netns has no useful /etc/resolv.conf; pin upstreams instead.
no-resolv
server=1.1.1.1
server=1.0.0.1

# Local service names (must stay in sync with the Caddyfile vhosts).
addn-hosts=/etc/dnsmasq/addn-hosts

# Never resolve single-label names or private/bogus ranges as public names.
domain-needed
bogus-priv

# Cache.
cache-size=1000
neg-ttl=300