dnsmasq: drop dhcp-proxy option

Instead add firewall rules to allow direct communication from client networks.
2024-11-09 20:06:58 +01:00 · 2024-11-09 20:06:58 +01:00 · 554bf1f711
commit 554bf1f711
parent 46a9ff6fc0
3 changed files with 18 additions and 1 deletions
--- a/roles/dnsmasq/tasks/main.yml
+++ b/roles/dnsmasq/tasks/main.yml
@ -38,4 +38,10 @@
  - 10-ranges.conf
  notify: restart dnsmasq

+- name: Configure nftables
+  template:
+    dest: '/etc/nftables.d/dnsmasq.nft'
+    src: 'dnsmasq.nft.j2'
+  notify: reload nftables
+
 # TODO netboot config