iankelling.org
/
git
/
distro-setup
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
mostly fixes, a few improvements
[distro-setup]
/
trusted-network
diff --git
a/trusted-network
b/trusted-network
index c0ed8a5094fcdadd153b291e4461dbf7251b37d2..825604e8421e21698b066860f0fb8dfe3807b471 100755
(executable)
--- a/
trusted-network
+++ b/
trusted-network
@@
-57,13
+57,17
@@
if $trust; then
fi
fi
fi
fi
- rm -fv /etc/systemd/resolved.conf.d/untrusted-network.conf
+ # https://github.com/jonathanio/update-systemd-resolved
+ # suggests this will help prevent leakage into a vpn interface
+ cat >/etc/systemd/resolved.conf.d/untrusted-network.conf <<EOF
+Domains=~.
+EOF
else #untrusted
# https://wiki.archlinux.org/index.php/Systemd-resolved#Manually
cat >/etc/systemd/resolved.conf.d/untrusted-network.conf <<EOF
[Resolve]
DNS=${servers[@]}
else #untrusted
# https://wiki.archlinux.org/index.php/Systemd-resolved#Manually
cat >/etc/systemd/resolved.conf.d/untrusted-network.conf <<EOF
[Resolve]
DNS=${servers[@]}
-Domains=b8.nz
+Domains=
~.
b8.nz
DNSOverTLS=yes
EOF
DNSOverTLS=yes
EOF