From b8ef55faea9dd9ebeec0519aa82fa4b3d1d65e51 Mon Sep 17 00:00:00 2001 From: ahtlon Date: Mon, 14 Sep 2026 16:41:07 +0200 Subject: [PATCH] [wireguard] disable dns for now problem is wg-quick sets the systemd-resolve dns domain to ~, which routes all queries over that network and ns1 was not jet connected --- machines/modules/malobeo/wireguard.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/machines/modules/malobeo/wireguard.nix b/machines/modules/malobeo/wireguard.nix index 9d606c6..f9432ec 100644 --- a/machines/modules/malobeo/wireguard.nix +++ b/machines/modules/malobeo/wireguard.nix @@ -72,7 +72,7 @@ in mtu = 1340; #seems to be necessary to proxypass nginx traffic through vpn address = [ "${myPeer.address}/24" ]; autostart = cfg.autostart; - dns = [peers.ns1.address "1.1.1.1"]; + #dns = [peers.ns1.address "1.1.1.1"]; #currently broken, see commit message listenPort = mkIf (myPeer.role == "server") myPeer.listenPort; # This allows the wireguard server to route your traffic to the internet and hence be like a VPN