Start9/start-os
2
0
Fork 0
mirror of https://github.com/Start9Labs/start-os.git synced 2026-03-30 12:11:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fallback DNS/NTP server privacy enhancements (#2992)

Browse Source
This commit is contained in:
gStart9
2025-07-16 15:31:52 -06:00
committed by GitHub
parent ee27f14be0
commit ba2906a42e
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
debian/postinst vendored
View File

@@ -62,7 +62,7 @@ ln -s /usr/share/zoneinfo/Etc/UTC /etc/localtime
echo "#" > /etc/network/interfaces echo "#" > /etc/network/interfaces
if ! [ -f /etc/resolv.conf ]; then if ! [ -f /etc/resolv.conf ]; then
rm -f /etc/resolv.conf rm -f /etc/resolv.conf
echo "nameserver 8.8.8.8" > /etc/resolv.conf # Google DNS Fallback echo "nameserver 1.1.1.1" > /etc/resolv.conf # Cloudflare DNS Fallback
fi fi
if ! [ -f /run/systemd/resolve/stub-resolv.conf ]; then if ! [ -f /run/systemd/resolve/stub-resolv.conf ]; then
mkdir -p /run/systemd/resolve mkdir -p /run/systemd/resolve
@@ -112,6 +112,7 @@ sed -i '/\(^\|#\)\s*unqualified-search-registries\s*=\s*/c\unqualified-search-re
sed -i 's/\(#\|\^\)\s*\([^=]\+\)=\(suspend\|hibernate\)\s*$/\2=ignore/g' /etc/systemd/logind.conf sed -i 's/\(#\|\^\)\s*\([^=]\+\)=\(suspend\|hibernate\)\s*$/\2=ignore/g' /etc/systemd/logind.conf
sed -i '/\(^\|#\)MulticastDNS=/c\MulticastDNS=no' /etc/systemd/resolved.conf sed -i '/\(^\|#\)MulticastDNS=/c\MulticastDNS=no' /etc/systemd/resolved.conf
sed -i 's/\[Service\]/[Service]\nEnvironment=SYSTEMD_LOG_LEVEL=debug/' /lib/systemd/system/systemd-timesyncd.service sed -i 's/\[Service\]/[Service]\nEnvironment=SYSTEMD_LOG_LEVEL=debug/' /lib/systemd/system/systemd-timesyncd.service
sed -i "s/\.debian\./\./g;s/#FallbackNTP=/FallbackNTP=/" /etc/systemd/timesyncd.conf
sed -i '/\(^\|#\)RootDistanceMaxSec=/c\RootDistanceMaxSec=10' /etc/systemd/timesyncd.conf sed -i '/\(^\|#\)RootDistanceMaxSec=/c\RootDistanceMaxSec=10' /etc/systemd/timesyncd.conf
mkdir -p /etc/nginx/ssl mkdir -p /etc/nginx/ssl