[Resolve]
# Forward single-label (non-FQDN) queries upstream instead of dropping
# them to LLMNR/mDNS. Needed so corp shortnames like `sw-jenkins01`
# (CNAME'd to `*.xsight.ent` on Pi-hole) resolve via the xsight WG bridge.
# Trade-off: single-label queries now leak to whatever DNS the active
# link provides — acceptable on a home/work-managed laptop, less so on
# public wifi. See `man resolved.conf` → ResolveUnicastSingleLabel=.
ResolveUnicastSingleLabel=yes