local_data.conf

server:
    # nico-api.nico — NICo gRPC API
    # Port 443 (TLS). Accessed by DPU agents, admin CLI, PXE service, DHCP plugin,
    # NICo Metadata Service, and health probe.
    local-data: "nico-api.nico 300 IN A {{ NICO_API_EXTERNAL_IP }}"

    # nico-pxe.nico — PXE / boot service
    # Port 80 (HTTP). Accessed by DPU agents and iPXE clients for boot artifacts,
    # cloud-init payloads, and the internal APT repository.
    # WARNING: hardcoded in crates/agent/src/main_loop.rs
    local-data: "nico-pxe.nico 300 IN A {{ NICO_PXE_IP }}"

    # nico-static-pxe.nico — Static boot asset server
    # Port 80 (HTTP). Accessed by the host scout PXE loader for scout.squashfs,
    # scout.efi, and BFB images.
    # WARNING: hardcoded in pxe/common_files/scout-loader-rclocal and
    #          pxe/common_files/check-scout-updates.sh
    local-data: "nico-static-pxe.nico 300 IN A {{ NICO_STATIC_PXE_IP }}"

    # nico-ntp.nico — NTP service
    # Port 123 (UDP). Accessed by DPU agents; distributed to managed hosts via DHCP option 42.
    # WARNING: hardcoded in crates/agent/src/main_loop.rs
    # Three A records for redundancy — one per NTP pod.
    local-data: "nico-ntp.nico 300 IN A {{ NICO_NTP_SERVERS_IP_0 }}"
    local-data: "nico-ntp.nico 300 IN A {{ NICO_NTP_SERVERS_IP_1 }}"
    local-data: "nico-ntp.nico 300 IN A {{ NICO_NTP_SERVERS_IP_2 }}"

    # unbound.nico — Recursive DNS resolver
    # Port 53 (UDP/TCP). Distributed to DPU agents and managed hosts as the
    # primary name server via DHCP option 6.
    local-data: "unbound.nico 300 IN A {{ NICO_UNBOUND_EXTERNAL_IP }}"

    # otel-receiver.nico — OpenTelemetry receiver
    # Port 443 (gRPC/TLS, OTLP). Accessed by otel-collector sidecars on DPUs.
    local-data: "otel-receiver.nico 300 IN A {{ ENVOY_EXTERNAL_SERVICE_IP }}"

    # socks.nico — SOCKS5 outbound proxy
    # Port 1888 (SOCKS5). Used by DPU agent extension service pods as HTTP_PROXY/HTTPS_PROXY.
    # WARNING: hardcoded in crates/agent/src/extension_services/k8s_pod_handler.rs
    local-data: "socks.nico 300 IN A {{ SOCKS_EXTERNAL_IP }}"