| Client | Resolver | Notes |
|---|---|---|
| Proxmox nodes | 100.100.100.100 (MagicDNS) | tailscaled runs on every node |
| LXCs with tailscaled | 100.100.100.100 (MagicDNS) | resolves tailnet names + forwards public queries |
| LXCs without tailscaled | 8.8.8.8 | set statically via pct --nameserver |
| Wiki.js / uptime LXCs | 192.168.86.1 + 8.8.8.8 | pinned deliberately — see lesson below |
| Jellyfin VM | systemd-resolved | Ubuntu default |
Lesson learned: a guest must never inherit the host's MagicDNS address (100.100.100.100) unless tailscaled runs inside that guest — the host's tailscaled isn't reachable from the guest's namespace and DNS silently dies.
codycodez.com is registered at Namecheap. Public records point the *.codycodez.com service names at the network for NPM to route (see DNS Records).
*.codycodez.com via public DNS. Consider Pi-hole/AdGuard/Unbound with local overrides..lab names) — tailnet MagicDNS names partially fill this role.