# FIPS mesh DNS — forward .fips queries to the local FIPS DNS responder.
#
# server=     forward all .fips queries to 127.0.0.1:5354
# rebind-domain-ok=  disable DNS-rebind protection for .fips; FIPS node
#             addresses live in fd00::/8 (ULA), which dnsmasq blocks by
#             default as a rebind-attack countermeasure.
#
# If your fips.yaml sets dns.port to something other than 5354, update the
# port number below to match.
server=/fips/127.0.0.1#5354
rebind-domain-ok=/fips/
