Streams Pi-hole DNS query log to Watchtower receiver on surfaceblack (192.168.86.4:4711). Pure bash, no ~/prod/ code. Managed by systemd via execution standard.