From 17030f764753c6f8ff9d6f6cc32568af1ca781cb Mon Sep 17 00:00:00 2001
From: poprhythm <james.kolpack@gmail.com>
Date: Mon, 17 Aug 2026 01:33:49 +0000
Subject: [PATCH] technitium: add container-host DNS instance for cluster mode
 with dns02

Deploys a second Technitium instance on the container host (192.168.1.67)
to pair with the existing Pi-based instance at dns02 (192.168.1.45) via
native Technitium v14+ clustering for DNS redundancy.
---
 technitium/docker-compose.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 technitium/docker-compose.yaml

diff --git a/technitium/docker-compose.yaml b/technitium/docker-compose.yaml
new file mode 100644
index 0000000..5c1f449
--- /dev/null
+++ b/technitium/docker-compose.yaml
@@ -0,0 +1,30 @@
+services:
+  technitium:
+    container_name: technitium
+    hostname: dns-container
+    image: docker.io/technitium/dns-server:latest
+    restart: unless-stopped
+    environment:
+      - DNS_SERVER_DOMAIN=dns-container
+      - DNS_SERVER_LOG_FOLDER_PATH=/var/log/technitium/dns
+      # Required for clustering: HTTPS admin console, used for node-to-node
+      # config sync and TLS join. Must NOT be proxied through nginx-proxy-manager
+      # (TLS must terminate at the node itself for DANE-EE cluster auth).
+      - DNS_SERVER_WEB_SERVICE_ENABLE_HTTPS=true
+      - DNS_SERVER_WEB_SERVICE_USE_SELF_SIGNED_CERT=true
+    ports:
+      - "5380:5380/tcp"   # DNS web console (HTTP) - fronted by NPM
+      - "53443:53443/tcp" # DNS web console (HTTPS) - cluster node-to-node sync, do not proxy
+      - "53:53/udp"       # DNS service
+      - "53:53/tcp"       # DNS service
+    volumes:
+      - /srv/technitium/config:/etc/dns
+      - /srv/technitium/logs:/var/log/technitium/dns
+    sysctls:
+      - net.ipv4.ip_local_port_range=1024 65535
+    networks:
+      - npm-network
+
+networks:
+  npm-network:
+    external: true