add domain and forward-nameserver, etcd is not exposed anymore