From a6c4d3be8cbfc332adaa22289d0786d21f9a713b Mon Sep 17 00:00:00 2001 From: Oier Bravo Urtasun Date: Sun, 24 May 2026 04:47:10 +0200 Subject: [PATCH] feat(dnsmasq): add air-gap spoof records for upstream hosts Co-Authored-By: Claude Opus 4.7 (1M context) --- dnsmasq/dnsmasq.conf.tmpl | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/dnsmasq/dnsmasq.conf.tmpl b/dnsmasq/dnsmasq.conf.tmpl index d1d8ca4..911ab9f 100644 --- a/dnsmasq/dnsmasq.conf.tmpl +++ b/dnsmasq/dnsmasq.conf.tmpl @@ -2,3 +2,14 @@ # Rendered by tooling/render-config.sh -> dnsmasq/dnsmasq.conf (gitignored). address=/${BASE_DOMAIN}/${HOST_LAN_IP} no-resolv + +# Full client air-gap (see plan/11-full-airgap-mirror.md): spoof the real +# upstream hosts -> our Caddy mirror. Auth hosts (session/textures/api.mojang) +# are NOT spoofed — drasl handles those via authlib-injector. Keep this list in +# sync with the proxy-capture step. +address=/meta.prismlauncher.org/${HOST_LAN_IP} +address=/piston-meta.mojang.com/${HOST_LAN_IP} +address=/piston-data.mojang.com/${HOST_LAN_IP} +address=/libraries.minecraft.net/${HOST_LAN_IP} +address=/maven.neoforged.net/${HOST_LAN_IP} +address=/resources.download.minecraft.net/${HOST_LAN_IP}