expose coredns outside of the cluster

nix/flake/kubenix/default.nix

@@ -65,6 +65,32 @@
                     loadBalancerIP: "192.168.30.128"
               '';
             };
+
+            configMaps.coredns-custom = {
+              metadata.namespace = "kube-system";
+              data."external.server" = ''
+                kubernetes.dmz {
+                  kubernetes
+                  k8s_external kubernetes.dmz
+                }
+              '';
+            };
+
+            services.kube-dns-external = {
+              metadata.namespace = "kube-system";
+
+              spec = {
+                type = "LoadBalancer";
+                loadBalancerIP = "192.168.30.133";
+                selector.k8s-app = "kube-dns";
+
+                ports = [{
+                  port = 53;
+                  targetPort = 53;
+                  protocol = "UDP";
+                }];
+              };
+            };
           };
 
           helm.releases.metallb = {

nix/modules/networking/dmz_services/dnsmasq.nix

@@ -24,6 +24,7 @@ in
   server = [
     cfg.dmz.ipv4.router
     "/kun.is/${cfg.dmz.ipv4.services}"
+    "/kubernetes.dmz/192.168.30.133"
   ];
 
   dhcp-range = [