X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=trusted-network;h=825604e8421e21698b066860f0fb8dfe3807b471;hb=9a0f77b0495e6f2643d5646c54b4c99cf3118c67;hp=c0ed8a5094fcdadd153b291e4461dbf7251b37d2;hpb=5a6e794f459b3e83b6d665e05d0ab0c8bc6cdfbe;p=distro-setup

diff --git a/trusted-network b/trusted-network
index c0ed8a5..825604e 100755
--- a/trusted-network
+++ b/trusted-network
@@ -57,13 +57,17 @@ if $trust; then
     fi
   fi
 
-  rm -fv /etc/systemd/resolved.conf.d/untrusted-network.conf
+  # https://github.com/jonathanio/update-systemd-resolved
+  # suggests this will help prevent leakage into a vpn interface
+  cat >/etc/systemd/resolved.conf.d/untrusted-network.conf <<EOF
+Domains=~.
+EOF
 else  #untrusted
   # https://wiki.archlinux.org/index.php/Systemd-resolved#Manually
   cat >/etc/systemd/resolved.conf.d/untrusted-network.conf <<EOF
 [Resolve]
 DNS=${servers[@]}
-Domains=b8.nz
+Domains=~. b8.nz
 DNSOverTLS=yes
 EOF