diff --git a/netinfra/pihole/docker-compose.yml b/netinfra/pihole/docker-compose.yml
index aaf650c..8ee8d7d 100644
--- a/netinfra/pihole/docker-compose.yml
+++ b/netinfra/pihole/docker-compose.yml
@@ -22,6 +22,11 @@ services:
       FTLCONF_dns_rateLimit_count: '0'
       FTLCONF_dns_rateLimit_interval: '0'
       FTLCONF_dns_upstreams: '["8.8.8.8"]'
+      # Conditional forwarding: knel.net + 100.64/10 + 192.168/16 all go to
+      # this node's Technitium (tsys-dns) over the shared dnsnet bridge —
+      # Technitium is the single source of truth for knel.net zones. Set
+      # live 2026-08-26 [#449]; mirrored here so recreation keeps it.
+      FTLCONF_dns_revServers: '["true,100.64.0.0/10,10.53.0.53,knel.net","true,192.168.0.0/16,10.53.0.53"]'
     volumes:
       - './etc-pihole:/etc/pihole'
       - './etc-dnsmasq.d:/etc/dnsmasq.d'