next ai changes

host/setup.sh

@@ -18,8 +18,18 @@ echo "==> sysctl (ip_forward)"
 install -m 0644 99-vpnhub-sysctl.conf /etc/sysctl.d/99-vpnhub.conf
 sysctl --system >/dev/null
 
+echo "==> Freeing port 53 (systemd-resolved stub listener) for Technitium"
+mkdir -p /etc/systemd/resolved.conf.d
+printf '[Resolve]\nDNSStubListener=no\n' > /etc/systemd/resolved.conf.d/99-vpnhub.conf
+# resolv.conf must stop pointing at the (now dead) 127.0.0.53 stub
+if [ -e /run/systemd/resolve/resolv.conf ]; then
+  ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf
+fi
+systemctl try-restart systemd-resolved || true
+
 echo "==> Firewall (WARNING: INPUT policy DROP — port 22 stays open)"
 sed "s/\${PUBIF}/${PUBIF}/g" rules.v4.template > /etc/iptables/rules.v4
+sed "s/\${PUBIF}/${PUBIF}/g" rules.v6.template > /etc/iptables/rules.v6
 netfilter-persistent reload
 # reload flushed Docker's chains; put them back if Docker is running
 if systemctl is-active --quiet docker; then