diff options
Diffstat (limited to 'etc/systemd/resolved.conf.d')
| -rw-r--r-- | etc/systemd/resolved.conf.d/10-single-label.conf | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/etc/systemd/resolved.conf.d/10-single-label.conf b/etc/systemd/resolved.conf.d/10-single-label.conf new file mode 100644 index 0000000..b2b1e9a --- /dev/null +++ b/etc/systemd/resolved.conf.d/10-single-label.conf @@ -0,0 +1,8 @@ +[Resolve] +# Forward single-label (non-FQDN) queries upstream instead of dropping +# them to LLMNR/mDNS. Needed so corp shortnames like `sw-jenkins01` +# (CNAME'd to `*.xsight.ent` on Pi-hole) resolve via the xsight WG bridge. +# Trade-off: single-label queries now leak to whatever DNS the active +# link provides — acceptable on a home/work-managed laptop, less so on +# public wifi. See `man resolved.conf` → ResolveUnicastSingleLabel=. +ResolveUnicastSingleLabel=yes |