WireGuard DNS via resolvectl statt DNS= Direktive

wg-quick DNS= setzt catch-all (~.) ueber resolvconf, was
systemd-resolved Stub-Resolver blockiert. Flatpak-Apps (Brave,
PrusaSlicer) koennen 127.0.0.53 nicht erreichen und haben
kein DNS. Fix: PostUp/PostDown mit resolvectl fuer korrektes
Interface-basiertes DNS. resolv.conf zeigt auf stub-resolv.conf.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
rene 2026-03-13 08:54:24 +01:00
parent 4a4e08a302
commit 72a177e0e5
3 changed files with 7 additions and 5 deletions

View file

@ -161,9 +161,9 @@ if [[ -n "$REPO_DIR" && -f "$REPO_DIR/wireguard/m${MODEL}.conf" ]]; then
cp "$REPO_DIR/wireguard/m${MODEL}.conf" /etc/wireguard/wg0.conf
chmod 600 /etc/wireguard/wg0.conf
systemctl enable wg-quick@wg0 2>/dev/null || true
# systemd-resolved Stub funktioniert nicht mit WireGuard DNS catch-all (~.)
# → resolv.conf direkt auf die upstream-Server zeigen lassen
ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf
# Stub-Resolver noetig fuer Flatpak-Apps (Brave, PrusaSlicer)
# DNS wird per PostUp/PostDown in der wg-Config via resolvectl gesetzt
ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
ok "WireGuard m${MODEL}.conf → /etc/wireguard/wg0.conf"
else
warn "WireGuard: keine lokale Config gefunden — manuell einrichten"