Bypass the router for internal traffic.

Makes the local resolver configuration more involved but I think it's worth when the router is under heavy load.

Bypass the router for internal traffic.
fae72bee · nimrod · e92c4744 · fae72bee
Commit fae72bee authored 4 years ago by nimrod
--- a/roles/router/files/unbound/shore.co.il.conf
+++ b/roles/router/files/unbound/shore.co.il.conf
@@ -5,5 +5,19 @@ server:
    access-control: 127.0.0.0/8 allow
    local-data: "ea6350.shore.co.il.        A   192.168.3.11"
    local-data: "kodi.shore.co.il.          A   192.168.3.12"
+    local-data: "jellyfin.shore.co.il.      CNAME kodi.shore.co.il"
+    local-data: "library.shore.co.il.       CNAME kodi.shore.co.il"
+    local-data: "transmission.shore.co.il.  CNAME kodi.shore.co.il"
    local-data: "host01.shore.co.il.        A   192.168.3.17"
+    local-data: "auth.shore.co.il.          CNAME host01.shore.co.il"
+    local-data: "code.shore.co.il.          CNAME host01.shore.co.il"
+    local-data: "git.shore.co.il.           CNAME host01.shore.co.il"
+    local-data: "lam.shore.co.il.           CNAME host01.shore.co.il"
+    local-data: "nextcloud.shore.co.il.     CNAME host01.shore.co.il"
+    local-data: "notify.shore.co.il.        CNAME host01.shore.co.il"
+    local-data: "sogo.shore.co.il.          CNAME host01.shore.co.il"
+    local-data: "vouch.shore.co.il.         CNAME host01.shore.co.il"
+    local-data: "zpush.shore.co.il.         CNAME host01.shore.co.il"
    local-data: "smtp.shore.co.il.          A   192.168.3.17"
+    local-data: "imap.shore.co.il.          CNAME smtp.shore.co.il"
+    local-data: "mta-sts.shore.co.il.       CNAME smtp.shore.co.il"