The addresses dnsmasq listens on beside the machine's are a setting, so a machine that answers its own LAN can say so (novox/hq issue 198). Docker's daemon.json no longer merges the module's settings: it needs none, and a setting reaching it is a key dockerd refuses. The host still merges it into the existing file.