From 362206287265a8963abe9ee3f7fdec7f586502ac Mon Sep 17 00:00:00 2001 From: Jimmy Axenhus Date: Sun, 28 Feb 2021 16:29:27 +0100 Subject: Initial commit --- dnsmasq.service.d/50-qubes-vpn-exclude.conf | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 dnsmasq.service.d/50-qubes-vpn-exclude.conf (limited to 'dnsmasq.service.d/50-qubes-vpn-exclude.conf') diff --git a/dnsmasq.service.d/50-qubes-vpn-exclude.conf b/dnsmasq.service.d/50-qubes-vpn-exclude.conf new file mode 100644 index 0000000..32f4b9c --- /dev/null +++ b/dnsmasq.service.d/50-qubes-vpn-exclude.conf @@ -0,0 +1,14 @@ +[Unit] +ConditionPathExists=!/var/run/qubes/this-is-templatevm +ConditionPathExists=/var/run/qubes-service/vpn-exclude-domains + +After=qubes-firewall.service rw.mount qubes-vpn-handler.service +BindsTo=qubes-vpn-handler.service + +[Service] +ExecStartPre=/rw/config/qubes-vpn-exclude/generate-dnsmasq.sh +ExecStopPost=-/usr/sbin/ipset flush qubes-vpn-exclude-4 +ExecStopPost=-/usr/sbin/ipset flush qubes-vpn-exclude-6 + +[Install] +WantedBy=qubes-vpn-handler.service -- cgit v1.2.3