nixos-config/system/desktop/dnsmasq.nix

{ config, lib, pkgs, ... }:

with lib;

{
  services.dnsmasq = {
    enable = mkDefault true;
    extraConfig = ''
      ${concatStringsSep "\n"
      (flip mapAttrsToList config.module.cluster.services.tinc."private".hosts
        (name: attrs: "address=/.${name}.private/${attrs.tincIp}"))}
    '';
  };
}