# Quadlet unit: dnsmasq LAN DNS (rootless, boot-persistent).
#
# Install path on dankclaw: ~/.config/containers/systemd/dnsmasq.container
# Unit name: dnsmasq.service (container name: dnsmasq)
#
# The LAN's authoritative DNS for the flat franksdank.cloud / franksdank.casa
# name scheme. It serves A records from addn-hosts (one per Caddy vhost) and
# forwards everything else to pinned upstream resolvers. The SURFboard G36
# router hands this server out to DHCP clients (DNS Relay -> statically
# configured -> 192.168.0.143), so no client needs per-device config.
#
# Runs on slirp4netns with port 53 published to the LAN (the same pattern as
# open-webui). Config mounts from /home/dank/Containers/dnsmasq. See
# docs/Infrastructure/LAN-DNS.md.

[Unit]
Description=dnsmasq LAN DNS container
After=network.target

[Container]
ContainerName=dnsmasq
Network=slirp4netns
Image=localhost/dnsmasq:latest
PublishPort=53:53/tcp
PublishPort=53:53/udp
Volume=/home/dank/Containers/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
Volume=/home/dank/Containers/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro

[Service]
Restart=always

[Install]
WantedBy=default.target