diff --git a/dnsmasq/files/rre.conf b/dnsmasq/files/rre.conf
new file mode 100644
index 0000000..7dad62c
--- /dev/null
+++ b/dnsmasq/files/rre.conf
@@ -0,0 +1,51 @@
+expand-hosts
+domain=rre.nu
+server=10.2.0.1
+# rre infrasturcture
+address=/parsley/10.2.0.11
+address=/parsley/10.2.0.15
+address=/parsley/10.2.0.16
+address=/parsley/10.2.0.17
+address=/parsley/10.2.0.101
+address=/parsley/10.2.0.102
+
+address=/sw2/10.0.10.3
+address=/ap1/10.0.10.4
+address=/ap2/10.0.10.5
+address=/ap3/10.0.10.6
+address=/ap4/10.0.10.7
+
+address=/woody/10.0.10.20
+address=/laserjet/10.0.10.30
+
+# MetalLB
+# 10.2.0.60-70
+address=/public/10.2.0.60
+address=/private/10.2.0.61
+address=/unifi/10.2.0.62
+address=/gitea/10.2.0.63
+address=/mqtt/10.2.0.64
+
+
+# public
+cname=git.rre.nu,public.rre.nu
+cname=home.rre.nu,public.rre.nu
+cname=push.rre.nu,public.rre.nu
+cname=nextcloud.rre.nu,public.rre.nu
+
+# private
+cname=longhorn.rre.nu,public.rre.nu
+
+#old
+cname=grafana.rre.nu,chervil.rre.nu
+cname=prom.rre.nu,chervil.rre.nu
+cname=mariadb.rre.nu,curry.rre.nu
+cname=influxdb.rre.nu,curry.rre.nu
+cname=dns.rre.nu,curry.rre.nu
+
+cname=gargamel.nu,cumin.rre.nu
+cname=radicale.rre.nu,cumin.rre.nu
+cname=nc.rre.nu,cumin.rre.nu
+cname=mqtt.rre.nu,cumin.rre.nu
+cname=paste.rre.nu,cumin.rre.nu
+cname=l.rre.nu,cumin.rre.nu
diff --git a/dnsmasq/init.sls b/dnsmasq/init.sls
new file mode 100644
index 0000000..9638612
--- /dev/null
+++ b/dnsmasq/init.sls
@@ -0,0 +1,18 @@
+Install dnsmasq:
+  pkg.installed:
+    - name: dnsmasq
+
+rre.nu configuration file:
+  file.managed:
+    - name: /etc/dnsmasq.d/rre.conf
+    - source: salt://dnsmasq/files/rre.conf
+    - user: root
+    - group: root
+    - mode: "0644"
+
+start dnsmasq:
+  service.running:
+    - name: dnsmasq
+    - enable: True
+    - watch:
+      - file: rre.nu configuration file
diff --git a/top.sls b/top.sls
index 56b64cc..bca27d1 100644
--- a/top.sls
+++ b/top.sls
@@ -1,3 +1,9 @@
 base:
+  'pepper.rre.nu':
+    - dnsmasq
+
+  'salt.rre.nu':
+    - dnsmasq
+
   'N@master or N@workers':
     - k3s.dns