nixos-servers/nixos/modules/networking/dmz/dnsmasq.nix

{ config, ... }:
let
  inherit (config.lab.networking) publicIPv4 dockerSwarmInternalIPv4 dmzServicesIPv4 dmzServicesIPv6 dmzRouterIPv4;
in
{
  no-resolv = true;
  local = "/dmz/";
  dhcp-fqdn = true;
  no-hosts = true;
  expand-hosts = true;
  domain = "dmz";
  dhcp-authoritative = true;
  ra-param = "*,0,0";
  alias = "${publicIPv4},${dockerSwarmInternalIPv4}";
  log-dhcp = true;
  log-queries = true;
  port = "5353";
  host-record = [
    "hermes.dmz,${dmzServicesIPv4},${dmzServicesIPv6}"
    "ipv4.hermes.dmz,${dmzServicesIPv4}"
    "ipv6.hermes.dmz,${dmzServicesIPv6}"
  ];

  server = [
    dmzRouterIPv4
    "/geokunis2.nl/${dmzServicesIPv4}"
    "/kun.is/${dmzServicesIPv4}"
  ];

  dhcp-range = [
    "192.168.30.50,192.168.30.127,15m"
    "2a0d:6e00:1a77:30::,ra-stateless,ra-names"
  ];

  dhcp-host = [
    "b8:27:eb:b9:ab:e2,esrom"
    "ca:fe:c0:ff:ee:08,maestro,${dockerSwarmInternalIPv4}"
  ];

  dhcp-option = [
    "3,${dmzRouterIPv4}"
    "option:dns-server,${dmzRouterIPv4}"
    "option6:dns-server,[2a02:58:19a:30::1]"
  ];

  address = [
    "/ns.pizzapim.nl/ns.geokunis2.nl/${dmzServicesIPv4}"
    "/ns.pizzapim.nl/ns.geokunis2.nl/${dmzServicesIPv6}"
  ];
}