The stale `address=/demo-felhom.eu/192.168.0.162` pinned A to the host (pre-Proxmox
era, when the host ran traefik) and forwarded AAAA upstream → Cloudflare (split-brain),
so LAN clients hit 192.168.0.162:443 (nothing there) → ERR_CONNECTION_REFUSED.
Switch to a conditional forward `server=/demo-felhom.eu/192.168.0.162` so the Pi-hole
relays the zone to the felhom-agent-managed dnsmasq on the host, which answers the
guest's live IP (192.168.0.151) + AAAA NODATA and tracks the DHCP IP.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
admin
6ea71dfdb7