From ee10dabf9d4cd48f7ea45cc663d2ca1cc19f38cb Mon Sep 17 00:00:00 2001
From: Joshua Bell <abc@joshuabell.xyz>
Date: Sat, 7 Feb 2026 15:07:39 -0600
Subject: [PATCH] Document DNS splitting and add etebase A record

---
 hosts/h003/mods/networking.nix  | 3 ++-
 hosts/linode/l001/headscale.nix | 4 +++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/hosts/h003/mods/networking.nix b/hosts/h003/mods/networking.nix
index cd97830b..aa89cf37 100644
--- a/hosts/h003/mods/networking.nix
+++ b/hosts/h003/mods/networking.nix
@@ -173,7 +173,8 @@
       # [/media.joshuabell.xyz/]127.0.0.1:9053
       # [/jellyfin.joshuabell.xyz/]127.0.0.1:9053
       host-record = [
-        # DNS splitting
+        # DNS splitting on local network
+        # Basically these are intercepted and resolve to local IP's when anyone is connected to home network
         "media.joshuabell.xyz,10.12.14.10"
         "jellyfin.joshuabell.xyz,10.12.14.10"
       ];
diff --git a/hosts/linode/l001/headscale.nix b/hosts/linode/l001/headscale.nix
index a279c073..b16d918a 100644
--- a/hosts/linode/l001/headscale.nix
+++ b/hosts/linode/l001/headscale.nix
@@ -27,12 +27,13 @@
           # ];
           extra_records =
             let
+              # DNS splitting at the tailscale network level. We intercept these domains
+              # when connected to tailscale and skip my global/internet facing DNS proxy
               h001ARecord = name: {
                 type = "A";
                 name = "${name}.joshuabell.xyz";
                 value = "100.64.0.13";
               };
-
             in
             [
               (h001ARecord "jellyfin")
@@ -46,6 +47,7 @@
               (h001ARecord "gist")
               (h001ARecord "git")
               (h001ARecord "blog")
+              (h001ARecord "etebase")
             ];
         };
       };