# Serve DHCP only on vmbr1
interface=vmbr1
bind-interfaces

# Disable DNS functionality entirely
port=0

# DHCP range with 12h lease time
dhcp-range={{ nat_subnet_prefix }}.100,{{ nat_subnet_prefix }}.200,12h

# Gateway and external DNS for clients
dhcp-option=3,{{ nat_subnet_prefix }}.1     # Gateway
dhcp-option=6,1.1.1.1,1.0.0.1               # DNS servers

# Block dnsmasq from loading unrelated configs
no-hosts
no-resolv

# Disable ping checks and extra interfaces
no-ping
no-dhcp-interface=

# Drop privileges
user=dnsmasq
group=dnsmasq

# Logging
log-queries
log-dhcp