From 3638e368b1d055a9fff2b184ec8e2eb1f63a3390 Mon Sep 17 00:00:00 2001 From: "fkrebs (via Claude)" Date: Sun, 24 May 2026 15:42:10 +0200 Subject: [PATCH] adguard: document new *.nuclide.lan zone (30 A-records) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Per-host + per-service LAN-only aliases added 2026-05-24 on CT 102. Stable names → host IPs; clients use names instead of bare IPs so service moves only require an AdGuard edit, not N app updates. Use case driver: Immich Android HTTP/2 Keep-Alive bug — per-SSID 'nuclide' local URL https://immich.nuclide.lan:12000 bypasses Zoraxy. --- services/adguard-dns.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/services/adguard-dns.md b/services/adguard-dns.md index 10bb520..a3c9910 100644 --- a/services/adguard-dns.md +++ b/services/adguard-dns.md @@ -93,6 +93,23 @@ done echo "✅ Done! Add these in AdGuard UI manually." ``` +## `*.nuclide.lan` zone (LAN-only aliases, added 2026-05-24) + +30 A-records mapping stable names to host IPs. Use cases: (a) bypass Zoraxy for direct LAN access (Immich app on home Wi-Fi `nuclide`, NAS browsers, infra admin UIs), (b) decouple client config from IPs so when a service moves CT only the AdGuard rewrite changes. + +Naming convention: +- **Per-host** (one per CT/VM/device): `unifi`, `dlink`, `pve`, `adguard`, `backrest`, `zoraxy`, `id`, `db`, `secrets`, `ops`, `nas`, `docker`, `nextcloud`, `dev`, `shepard`, `ha`, `mainsail` +- **Per-service** (alias when only port differs from the host): `immich`, `vault`, `karakeep`, `memos`, `abs`, `gotify`, `n8n`, `chat`, `ai`, `mcp`, `grafana`, `prometheus`, `homarr` + +Full list in `/opt/AdGuardHome/AdGuardHome.yaml` under `dns.rewrites:`. Auto-pushed nightly to [`fkrebs/adguard-conf`](https://git.nuclide.systems/fkrebs/adguard-conf). + +**Adding a new service alias:** +1. Append a `- {domain: .nuclide.lan, answer: 192.168.x.y, enabled: true}` line +2. `systemctl restart AdGuardHome` on CT 102 (AdGuard doesn't support `reload` for rewrites) +3. Verify: `dig +short @192.168.1.2 .nuclide.lan` + +**When a service moves CT (changes IP):** edit only the AdGuard rewrite → restart. No client app needs an update — this is the whole point of the alias zone. + ## Alternative Useful DNS Entries ### NextCloud & Sync