Stop setting DNS for all on new systems pending that we move to something like #752

This commit is contained in:
David Heinemeier Hansson 2025-08-22 17:58:01 +02:00
parent b3d24a1b13
commit 8074694ac8
2 changed files with 0 additions and 10 deletions

View File

@ -1,4 +0,0 @@
[Resolve]
DNS=1.1.1.1
FallbackDNS=8.8.8.8
DNSStubListener=yes

View File

@ -26,12 +26,6 @@ sudo gpgconf --launch dirmngr || true
sudo sed -i 's|^\(auth\s\+required\s\+pam_faillock.so\)\s\+preauth.*$|\1 preauth silent deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
sudo sed -i 's|^\(auth\s\+\[default=die\]\s\+pam_faillock.so\)\s\+authfail.*$|\1 authfail deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
# Set Cloudflare as primary DNS (with Google as backup)
sudo cp ~/.local/share/omarchy/default/systemd/resolved.conf /etc/systemd/
# Ensure /etc/resolv.conf is symlinked to systemd-resolved's stub resolver
sudo ln -sfn /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf 2>/dev/null || true
# Solve common flakiness with SSH
echo "net.ipv4.tcp_mtu_probing=1" | sudo tee -a /etc/sysctl.d/99-sysctl.conf