#!/bin/sh

mkdir -p /opt/cni
ln -s /mnt/data/podman/cni/ /opt/cni/bin
ln -s /mnt/data/podman/cni/20-dns.conflist  /etc/cni/net.d/20-dns.conflist

# Create a new bridge interface so the host can talk to containers inside the podman macvlan network
# Assumes your Podman network made in the controller is on VLAN 5
# Adjust the IP to match the address in your cni configuration
ip link add br5.mac link br5 type macvlan mode bridge
ip addr add 192.168.5.2/24 dev br5.mac
ip link set br5.mac up
ip route add 192.168.5.5/32 dev br5.mac proto static scope link
podman start pihole

#Adjust these rules to your setup and interfaces
#iptables -t nat -C PREROUTING -i br0 -p udp ! --source 192.168.5.5 ! --destination 192.168.5.5 --dport 53 -j DNAT --to 192.168.5.5 || iptables -t nat -A PREROUTING -i br0 -p u
#iptables -t nat -C PREROUTING -i br0 -p tcp ! --source 192.168.5.5 ! --destination 192.168.5.5 --dport 53 -j DNAT --to 192.168.5.5 || iptables -t nat -A PREROUTING -i br0 -p t
#iptables -t nat -C POSTROUTING -o br0 -d 192.168.5.5 -p tcp --dport 53 -j MASQUERADE || iptables -t nat -A POSTROUTING -o br0  -d 192.168.5.5 -p tcp --dport 53 -j MASQUERADE
#iptables -t nat -C POSTROUTING -o br0 -d 192.168.5.5 -p udp --dport 53 -j MASQUERADE || iptables -t nat -A POSTROUTING -o br0  -d 192.168.5.5 -p udp --dport 53 -j MASQUERADE