# ZeroTier (clan mesh) addresses — the private IPv6 overlay every machine shares.
# DNS zone transfers and metrics scraping ride this mesh, never the public net.
rec {
  hosts = {
    control = "fd06:1bad:ece2:92ad:ba99:9306:1bad:ece2";
    ns1 = "fd06:1bad:ece2:92ad:ba99:939d:766d:8974";
    ns2 = "fd06:1bad:ece2:92ad:ba99:9323:61be:a09e";
  };

  # RFC 4193 /88 prefix of this ZeroTier network (fd + 8-byte network id + the
  # 0x9993 marker). Covers every mesh peer — servers and admin laptops alike —
  # and is used to scope mesh-only firewall rules.
  subnet = "fd06:1bad:ece2:92ad:ba99:9300::/88";
}