DNS changes: remove global configuration from resolved.conf; add access control and view specification for Docker networks to unbound.conf.

2026-10-11 20:28:08 -04:00
parent c3a59de697
commit 39a87feaf2
2 changed files with 8 additions and 2 deletions
@@ -27,16 +27,22 @@
    private-address: 100.64.0.0/10

    # addresses from the IP range that are allowed to connect to the resolver
+    # local physical LAN
    access-control: 192.168.88.0/24 allow
    # explicitly allow localhost access
    access-control: 127.0.0.0/8 allow
    # allow Tailnet
    access-control: 100.64.0.0/10 allow
+    # Docker bridge networks (default pool)
+    access-control: 172.16.0.0/12 allow
+    access-control: 192.168.0.0/16 allow
    # uncomment the following line to allow Tailnet IPv6
    # access-control: fd7a:115c:a1e0::/48 allow

    access-control-view: 192.168.88.0/24 lan
    access-control-view: 100.64.0.0/10 tailnet
+    access-control-view: 172.16.0.0/12 lan
+    access-control-view: 192.168.0.0/16 lan
    access-control-view: 127.0.0.0/8 lan
    
    do-ip4: yes