────────────────────────────────────────────────
  Rule: user
────────────────────────────────────────────────

  Description:         Standard user - blocks admin UIs
  Group:               —
  DNS:                 true (inherited)

    ↳ no-proxmox
      - 10.0.0.101/32         → npm
      - 10.0.0.100/32         → proxmox

    ↳ dns-restricted
      + 10.0.0.103:53:udp     → pihole:dns-udp
      + 10.0.0.103:53:tcp     → pihole:dns-tcp
      - 10.0.0.103/32         → pihole

    Own:
      - 10.0.0.100:8006:tcp   → proxmox:web-ui
      - 10.0.0.105:8007:tcp   → pbs:web-ui
      - 10.0.0.210:9000:tcp   → docker:portainer