Build Dnsmasq with nix-snapshotter

nixng-configurations/default.nix

@@ -0,0 +1,21 @@
+{
+  self,
+  flake-utils,
+  nixng,
+  nixpkgs,
+  ...
+}:
+flake-utils.lib.eachDefaultSystem (system: let
+  images = {
+    dnsmasq = ./dnsmasq.nix;
+  };
+in {
+  nixngConfigurations = builtins.mapAttrs (name: configFile:
+    nixng.nglib.makeSystem {
+      inherit nixpkgs system;
+      name = "nixng-${name}";
+      specialArgs = {inherit (self) globals;};
+      config = import configFile;
+    })
+  images;
+})

nixng-configurations/dnsmasq.nix

@@ -0,0 +1,28 @@
+{globals, ...}: {
+  dinit.enable = true;
+  init.services.dnsmasq.shutdownOnExit = true;
+
+  services.dnsmasq = {
+    enable = true;
+
+    settings = {
+      address = [
+        "/kms.kun.is/${globals.kmsIPv4}"
+        "/ssh.git.kun.is/${globals.gitIPv4}"
+      ];
+
+      alias = "${globals.routerPublicIPv4},${globals.traefikIPv4}";
+      expand-hosts = true;
+      local = "/dmz/";
+      log-queries = true;
+      no-hosts = true;
+      no-resolv = true;
+      port = 53;
+
+      server = [
+        "192.168.30.1"
+        "/kun.is/${globals.bind9IPv4}"
+      ];
+    };
+  };
+}