# ==============================================================================
# /etc/dnsmasq.d/homelab-transit.conf
# Isolated Transit Link DHCP & DNS Caching Service
# ==============================================================================

# Strict Interface Binding Isolation
bind-interfaces
interface=enp0s31f6
interface=lo
except-interface=wlan0
no-dhcp-interface=wlan0

# Bind explicitly to transit gateway IP
listen-address=172.16.100.1

# DHCP Scope for Transit
dhcp-range=enp0s31f6,172.16.100.10,172.16.100.50,255.255.255.0,12h
dhcp-option=enp0s31f6,3,172.16.100.1
dhcp-option=enp0s31f6,6,172.16.100.1,1.1.1.1,9.9.9.9

# DNS Forwarding & Privacy (Prevent upstream LAN DNS leaks)
domain-needed
bogus-priv
no-resolv
server=1.1.1.1
server=9.9.9.9
cache-size=4096