#!/bin/bash
set -e

# Routing — all DNS servers are on internet-external
ip route del default 2>/dev/null || true
ip route add default via 100.64.0.1    # Everything via fw-ext

# Start knot DNS
/usr/sbin/knotd --config /config/knot.conf --daemonize

echo "DNS server ready: $(hostname)"
sleep infinity