# dnsmasq: DHCP + TFTP + DNS on eth1 only (provisioning LAN).
# Install to /etc/dnsmasq.d/network-boot.conf on the LXC.
# Restrict to eth1 so we don't interfere with host/other DHCP.
# When using setup-network-boot-on-lxc.sh, the actual subnet, DHCP range, and
# file.server address come from /opt/cm4-provisioning/lan-subnet.conf (written by deploy-to-proxmox.sh).

# Listen only on eth1 (provisioning LAN)
interface=eth1
bind-interfaces

# DHCP range for devices on eth1 (template; setup script uses lan-subnet.conf)
dhcp-range=10.20.50.100,10.20.50.200,12h

# DNS: file.server -> eth1 IP (LAN_GW) so scripts can use http://file.server/... (setup script writes this)
# address=/file.server/10.20.50.1

# TFTP for Raspberry Pi / CM4 network boot
enable-tftp
tftp-root=/srv/tftpboot
# PXE options (66/67) are in network-boot-pxe.conf; remove that file to disable netboot advertising

# Logging (optional; disable in production if too noisy)
log-dhcp
log-queries