vorpax / dns.sh

A tiny bash util to setup dns and ssh

#!bin/zsh configure_interfaces() { log_info "Configuration via /etc/network/interfaces" cp /etc/network/interfaces /etc/network/interfaces.$(date +%s).bkp # Ajouter DNS si absent if ! grep -q "dns-nameservers" /etc/network/interfaces; then # Trouver l'interface principale main_iface=$(ip route | grep default | awk '{print $5}' | head -n1) if [[ -n $main_iface ]]; then DNS_JOIN="${DNS_SERVERS[*]}" # Ajouter après l'interface sed -i "/iface ${main_iface}/a \ dns-search ${SEARCH_DOMAIN}" /etc/network/interfaces sed -i "/iface ${main_iface}/a \ dns-nameservers ${DNS_JOIN}" /etc/network/interfaces fi else DNS_JOIN="${DNS_SERVERS[*]}" sed -i "s/dns-nameservers.*/dns-nameservers ${DNS_JOIN}/" /etc/network/interfaces sed -i "s/dns-search.*/dns-search ${SEARCH_DOMAIN}/" /etc/network/interfaces fi systemctl restart networking log_info "/etc/network/interfaces configuré" }

#!bin/zsh configure_systemd_resolved() { log_info "Configuration via systemd-resolved" # Créer le drop-in directory mkdir -p /etc/systemd/resolved.conf.d/ # Écrire la config cat > /etc/systemd/resolved.conf.d/dns.conf <<EOF [Resolve] DNS=${DNS_SERVERS[@]} FallbackDNS=1.1.1.1 8.8.8.8 Domains=${SEARCH_DOMAIN} DNSSEC=no DNSOverTLS=no EOF # Restart service systemctl restart systemd-resolved if [[ ! -L /etc/resolv.conf ]]; then log_warn "/etc/resolv.conf n'est pas un symlink, correction..." rm -f /etc/resolv.conf ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf fi log_info "systemd-resolved configuré" }

configure_static() { log_warn "Aucun gestionnaire détecté, configuration statique" # Désactiver immutabilité si présente chattr -i /etc/resolv.conf 2>/dev/null || true cp /etc/resolv.conf /etc/resolv.conf.backup.$(date +%s) cat > /etc/resolv.conf <<EOF # Generated by custom DNS setup script search ${SEARCH_DOMAIN} $(for dns in "${DNS_SERVERS[@]}"; do echo "nameserver $dns"; done) EOF # Rendre immutable pour éviter l'écrasement chattr +i /etc/resolv.conf log_info "Configuration statique appliquée (fichier verrouillé)" }