apiVersion: fancydns.k6n.net/v1alpha1
kind: DNSZone
metadata:
  name: home
  namespace: dns
spec:
  zone: home.example.com
  ttl: 300
  records:
    - {name: "@", type: NS, value: ns1.home.example.com.}
    - {name: ns1, type: A, value: 10.0.0.53}
    - {name: nas, type: A, value: 10.0.0.20}
    - {name: "*.apps", type: A, value: 10.0.0.30}
---
apiVersion: fancydns.k6n.net/v1alpha1
kind: ClientGroup
metadata:
  name: kids
  namespace: dns
spec:
  priority: 10
  policy: block_only
  match:
    cidrs: [10.0.20.0/24]
  deny_domains: ["**.tiktok.com"]
---
apiVersion: fancydns.k6n.net/v1alpha1
kind: BlockList
metadata:
  name: stevenblack
  namespace: dns
spec:
  url: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
  format: hosts
  refresh: 24h
  categories: [ads, malware]
---
apiVersion: fancydns.k6n.net/v1alpha1
kind: AddressOverride
metadata:
  name: k6n-net
  namespace: dns
spec:
  domain: k6n.net
  addresses: [10.10.3.10]
---
apiVersion: fancydns.k6n.net/v1alpha1
kind: DomainRule
metadata:
  name: inline-block
  namespace: dns
spec:
  action: block
  names: ["*.tracker.example"]