infrastructure/ansible/roles/adguardhome/files/Corefile

(alias) {
    errors
    cancel

    forward . tls://9.9.9.10 {
       tls_servername dns10.quad9.net
    }

    hosts {
        {{ pve_hosts.ingress.external_ip }} pve.sys.theorangeone.net
        fallthrough
        ttl 300
    }

    # HACK: Rewrite the CNAME to itself so it's reprocessed
    rewrite cname exact pve.sys.theorangeone.net. pve.sys.theorangeone.net.
}


theorangeone.net:53053 {
    import alias
}

jakehoward.tech:53053 {
    import alias
}

.:53053 {
    acl {
        block
    }
}