DNS changes: remove global configuration from resolved.conf; add access control and view specification for Docker networks to unbound.conf.

2026-10-11 20:28:08 -04:00
parent c3a59de697
commit 39a87feaf2
2 changed files with 8 additions and 2 deletions
@@ -21,8 +21,8 @@
 # Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
 # Google:     8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
 # Quad9:      9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
-DNS=192.168.88.231 192.168.88.40
-Domains=~objectbrokers.com
+#DNS=192.168.88.231 192.168.88.40
+#Domains=~objectbrokers.com
 #DNSSEC=no
 #DNSOverTLS=no
 #MulticastDNS=no
@@ -27,16 +27,22 @@
    private-address: 100.64.0.0/10

    # addresses from the IP range that are allowed to connect to the resolver
+    # local physical LAN
    access-control: 192.168.88.0/24 allow
    # explicitly allow localhost access
    access-control: 127.0.0.0/8 allow
    # allow Tailnet
    access-control: 100.64.0.0/10 allow
+    # Docker bridge networks (default pool)
+    access-control: 172.16.0.0/12 allow
+    access-control: 192.168.0.0/16 allow
    # uncomment the following line to allow Tailnet IPv6
    # access-control: fd7a:115c:a1e0::/48 allow

    access-control-view: 192.168.88.0/24 lan
    access-control-view: 100.64.0.0/10 tailnet
+    access-control-view: 172.16.0.0/12 lan
+    access-control-view: 192.168.0.0/16 lan
    access-control-view: 127.0.0.0/8 lan
    
    do-ip4: yes