diff --git a/content/post/13-migration-opnsense-proxmox-highly-available.md b/content/post/13-migration-opnsense-proxmox-highly-available.md index 6199b55..5d6fba4 100644 --- a/content/post/13-migration-opnsense-proxmox-highly-available.md +++ b/content/post/13-migration-opnsense-proxmox-highly-available.md @@ -247,6 +247,17 @@ For the DNS, I will use Unbound. It is a validating, recursive, caching DNS reso Let's configure Unbound, in `Services` > `Unbound DNS` > `General`: ![opnsense-unbound-general-settings.png](img/opnsense-unbound-general-settings.png) +I don't really modify advanced settings because I don't really know what I'm doing... + +Then I configure a bunch of host overrides, this is custom DNS record you want for your network. Here I will define my Proxmox nodes with their static IP addresses: +![opnsense-add-host-override.png](img/opnsense-add-host-override.png) + +As I set earlier the `Local Zone Type` to `static`, the DNS server will reply **NXDOMAIN** for anything not known for the local domain. For that reason, I need to add every subdomain served by my internal Traefik pointing to my reverse proxy (OPNsense in my current setup). + + + + + ### DHCP ### VPN diff --git a/static/img/opnsense-add-host-override.png b/static/img/opnsense-add-host-override.png new file mode 100644 index 0000000..6492c71 Binary files /dev/null and b/static/img/opnsense-add-host-override.png differ