nixos-servers/nixos/modules/networking/dmz/dnsmasq.nix

{ config, ... }:
let
  inherit (config.lab.networking) publicIPv4 dockerSwarmInternalIPv4 dmzDHCPIPv4 dmzRouterIPv4;
in
{
  no-resolv = true;
  local = "/dmz/";
  dhcp-fqdn = true;
  no-hosts = true;
  expand-hosts = true;
  domain = "dmz";
  dhcp-authoritative = true;
  ra-param = "*,0,0";
  alias = "${publicIPv4},${dockerSwarmInternalIPv4}";
  log-dhcp = true;
  log-queries = true;
  port = "5353";

  server = [
    dmzRouterIPv4
    "/geokunis2.nl/${dmzDHCPIPv4}"
    "/kun.is/${dmzDHCPIPv4}"
  ];

  dhcp-range = [
    "192.168.30.50,192.168.30.127,15m"
  ];

  dhcp-host = [
    "b8:27:eb:b9:ab:e2,esrom"
    "ca:fe:c0:ff:ee:08,maestro,${dockerSwarmInternalIPv4}"
  ];

  dhcp-option = [
    "3,${dmzRouterIPv4}"
    "option:dns-server,${dmzRouterIPv4}"
  ];

  address = [
    "/ns.pizzapim.nl/ns.geokunis2.nl/${dmzDHCPIPv4}"
  ];
}