diff --git a/helm/pihole/values.yaml b/helm/pihole/values.yaml
index fbabaa1..9ab39e2 100755
--- a/helm/pihole/values.yaml
+++ b/helm/pihole/values.yaml
@@ -54,7 +54,11 @@ serviceDns:
   type: LoadBalancer
 dnsmasq:
   customDnsEntries:
-    - address=/demo-felhom.eu/192.168.0.162
+    # Split-horizon for the Felhom demo: CONDITIONAL FORWARD the whole zone to the felhom-pve host's
+    # agent-managed dnsmasq (192.168.0.162:53), which answers *.demo-felhom.eu with the guest's LIVE
+    # LAN IP (A) and NODATA for AAAA (no Cloudflare-IPv6 split-brain). `server=` (not `address=`) so
+    # BOTH A and AAAA are forwarded, and the guest's DHCP IP is tracked by the agent — not pinned here.
+    - server=/demo-felhom.eu/192.168.0.162
 replicaCount: 1
 dns:
   adlist: