take down dns with wireguard

This commit is contained in:
Anish Lakhwara 2024-10-04 22:04:20 -07:00
parent 2c9bd72723
commit 4735734d9e

View file

@ -28,6 +28,9 @@
listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
privateKeyFile = config.age.secrets.work-wg.path;
dns = [ "10.0.69.4" ];
postDown = ''
sudo /usr/sbin/networksetup -setdnsservers Wi-Fi "Empty"
'';
peers = [
# For a client configuration, one peer entry for the server will suffice.
{