fix(vpn): enrol keith-phone-home and admit the WireGuard subnet to PiHole DNS #158

Merged

jakman85 merged 1 commits from fix/wg-home-peer-pihole-sources into main

2026-11-09 02:50:05 +00:00

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	f13d336630	fix(vpn): enrol keith-phone-home and admit the WireGuard subnet to PiHole DNS gate / gate (pull_request) Successful in 1m12s Details gate / conformance (pull_request) Skipped Details Add the at-home peer (10.90.0.3) and list ${WG_CLIENT_CIDR} in the PiHole DNS frontends' loadBalancerSourceRanges. wg0 is a Cilium device, so tunnel clients reach the source-range check untranslated; a LAN-only list is predicted to drop their DNS. Adds an L0 guard that both ranges are present and every range is RFC1918, and corrects the README's SNAT and IPv6 claims. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-08 20:45:48 -06:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

f13d336630

fix(vpn): enrol keith-phone-home and admit the WireGuard subnet to PiHole DNS

gate / gate (pull_request) Successful in 1m12s

Details

gate / conformance (pull_request) Skipped

Details

Add the at-home peer (10.90.0.3) and list ${WG_CLIENT_CIDR} in the PiHole
DNS frontends' loadBalancerSourceRanges. wg0 is a Cilium device, so tunnel
clients reach the source-range check untranslated; a LAN-only list is
predicted to drop their DNS. Adds an L0 guard that both ranges are present
and every range is RFC1918, and corrects the README's SNAT and IPv6 claims.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-08 20:45:48 -06:00