From ba2906a42e02cca32833294d28715d83d786f790 Mon Sep 17 00:00:00 2001
From: gStart9 <106188942+gStart9@users.noreply.github.com>
Date: Wed, 16 Jul 2025 15:31:52 -0600
Subject: [PATCH] Fallback DNS/NTP server privacy enhancements (#2992)

---
 debian/postinst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/debian/postinst b/debian/postinst
index c47ed493e..9124f03bc 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -62,7 +62,7 @@ ln -s /usr/share/zoneinfo/Etc/UTC /etc/localtime
 echo "#" > /etc/network/interfaces
 if ! [ -f /etc/resolv.conf ]; then
   rm -f /etc/resolv.conf
-  echo "nameserver 8.8.8.8" > /etc/resolv.conf # Google DNS Fallback
+  echo "nameserver 1.1.1.1" > /etc/resolv.conf # Cloudflare DNS Fallback
 fi
 if ! [ -f /run/systemd/resolve/stub-resolv.conf ]; then
     mkdir -p /run/systemd/resolve
@@ -112,6 +112,7 @@ sed -i '/\(^\|#\)\s*unqualified-search-registries\s*=\s*/c\unqualified-search-re
 sed -i 's/\(#\|\^\)\s*\([^=]\+\)=\(suspend\|hibernate\)\s*$/\2=ignore/g' /etc/systemd/logind.conf
 sed -i '/\(^\|#\)MulticastDNS=/c\MulticastDNS=no' /etc/systemd/resolved.conf
 sed -i 's/\[Service\]/[Service]\nEnvironment=SYSTEMD_LOG_LEVEL=debug/' /lib/systemd/system/systemd-timesyncd.service
+sed -i "s/\.debian\./\./g;s/#FallbackNTP=/FallbackNTP=/"  /etc/systemd/timesyncd.conf
 sed -i '/\(^\|#\)RootDistanceMaxSec=/c\RootDistanceMaxSec=10' /etc/systemd/timesyncd.conf
 
 mkdir -p /etc/nginx/ssl