Add 8.8.8.8 as a second ordered upstream in [upstream] server so DNS forwarding
falls back when 1.1.1.1 is unreachable. Note in [general] allowed_clients that
the 192.168.40.0/28 range already authorizes both consoles, PS5PRO
(192.168.40.14) and PS5FAT (192.168.40.13).
Co-Authored-By: Claude Opus 4.8 <[email protected]>
Replace the gateway's env-var DNS policy with docker/nanodns.ini, modelled on
https://github.com/drakmor/nanoDNS#config: [general] (redirect_url,
allowed_clients), [upstream] (ordered resolver list + timeout_ms), [overrides]
(mask = IPv4 spoof) and [exceptions] (masks forwarded upstream). Masks use
shell-style wildcards and match case-insensitively; resolution order is
exceptions -> overrides -> NXDOMAIN.
The unmatched-name behaviour is deliberately inverted from upstream nanoDNS:
names matching no rule return NXDOMAIN (default-deny) instead of being forwarded,
so PSN, updates and telemetry stay blocked. The source-client allowlist now lives
in [general] allowed_clients. The INI is baked into the image; CONFIG_FILE can
point at a mounted file for per-host overrides.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
kadinhoandClaude Opus 4.8