From 4735734d9eb51270bb64880277df07dfeadd54c5 Mon Sep 17 00:00:00 2001
From: Anish Lakhwara <anish+git@lakhwara.com>
Date: Fri, 4 Oct 2024 22:04:20 -0700
Subject: [PATCH] take down dns with wireguard

---
 hosts/darwin/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/darwin/default.nix b/hosts/darwin/default.nix
index 919b810e..25cc7264 100644
--- a/hosts/darwin/default.nix
+++ b/hosts/darwin/default.nix
@@ -28,6 +28,9 @@
       listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
       privateKeyFile = config.age.secrets.work-wg.path;
       dns = [ "10.0.69.4" ];
+      postDown = ''
+        sudo /usr/sbin/networksetup -setdnsservers Wi-Fi "Empty"
+      '';
       peers = [
         # For a client configuration, one peer entry for the server will suffice.
         {