/opt is root-owned; the established data-location pattern (see docs/Architecture/Storage Policy.md, open-webui quadlet) is /home/dank/Containers/<service>.
34 lines
1.1 KiB
INI
34 lines
1.1 KiB
INI
# Quadlet unit: dnsmasq LAN DNS (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankclaw: ~/.config/containers/systemd/dnsmasq.container
|
|
# Unit name: dnsmasq.service (container name: dnsmasq)
|
|
#
|
|
# The LAN's authoritative DNS for the flat franksdank.cloud / franksdank.casa
|
|
# name scheme. It serves A records from addn-hosts (one per Caddy vhost) and
|
|
# forwards everything else to pinned upstream resolvers. The SURFboard G36
|
|
# router hands this server out to DHCP clients (DNS Relay -> statically
|
|
# configured -> 192.168.0.143), so no client needs per-device config.
|
|
#
|
|
# Runs on slirp4netns with port 53 published to the LAN (the same pattern as
|
|
# open-webui). Config mounts from /home/dank/Containers/dnsmasq. See
|
|
# docs/Infrastructure/LAN-DNS.md.
|
|
|
|
[Unit]
|
|
Description=dnsmasq LAN DNS container
|
|
After=network.target
|
|
|
|
[Container]
|
|
ContainerName=dnsmasq
|
|
Network=slirp4netns
|
|
Image=localhost/dnsmasq:latest
|
|
PublishPort=53:53/tcp
|
|
PublishPort=53:53/udp
|
|
Volume=/home/dank/Containers/dnsmasq/dnsmasq.conf:/etc/dnsmasq.conf:ro
|
|
Volume=/home/dank/Containers/dnsmasq/addn-hosts:/etc/dnsmasq/addn-hosts:ro
|
|
|
|
[Service]
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=default.target
|