1.0 KiB
[2026-09-17] headscale now split-DNSes nh3.phasefinal.com to the three AdGuards, so mesh clients can resolve the internal-only wildcard
headscale now split-DNSes nh3.phasefinal.com to the three AdGuards, so mesh clients can resolve the internal-only wildcard (talk, booth — public DNS has no record for them; the fleet AdGuard answers 10.100.10.50). Operator-approved, scoped to nh3 rather than all of phasefinal.com. Config /etc/headscale/config.yaml in CT 106 on nh3-pve, backup config.yaml.bak-2026-09-17-splitdns, restarted, and the new route read back from a node's netmap rather than assumed. ⚠ Two things worth knowing: split DNS works fine here with global: [] — headscale issue #1161's "split ignored without global" does NOT apply to v0.29.3, verified on the live mesh — and override_local_dns: true would REQUIRE global, which is the config that makes a roaming laptop lose ALL DNS when the mesh is down. That is why split, not global. Routing was never the problem: nh3-scale already serves 10.100.0.0/16.