From 43547f45dea2b5ec5c2e397d1434a7d763d3aaf6 Mon Sep 17 00:00:00 2001 From: Jonas Juselius Date: Sun, 28 Sep 2025 08:48:35 +0200 Subject: [PATCH] fix: disable tailscale dns on login and manage --- .gitignore | 1 + rossby/login/default.nix | 2 +- rossby/manage/default.nix | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 534034a..638c5b5 100644 --- a/.gitignore +++ b/.gitignore @@ -6,3 +6,4 @@ result-* gcroots/ ca configuration.nix +system diff --git a/rossby/login/default.nix b/rossby/login/default.nix index 695d056..c2178c8 100644 --- a/rossby/login/default.nix +++ b/rossby/login/default.nix @@ -331,7 +331,7 @@ in useRoutingFeatures = "server"; # for exit-node usage extraUpFlags = [ "--login-server=https://headscale.svc.oceanbox.io" - "--accept-dns" + "--accept-dns=false" "--advertise-exit-node" "--advertise-tags=tag:rossby" ]; diff --git a/rossby/manage/default.nix b/rossby/manage/default.nix index 4409321..0b26768 100644 --- a/rossby/manage/default.nix +++ b/rossby/manage/default.nix @@ -299,7 +299,7 @@ in { useRoutingFeatures = "both"; # for exit-node usage extraUpFlags = [ "--login-server=https://headscale.svc.oceanbox.io" - "--accept-dns=true" # see dnsmasq + "--accept-dns=false" # see dnsmasq "--accept-routes=true" "--advertise-exit-node" "--advertise-routes=172.16.239.0/24,172.16.238.0/24"