From b2706ce878672303a18f2f17f6562fc1e693cc83 Mon Sep 17 00:00:00 2001
From: Benjamin Toby <devops@tben.me>
Date: Sun, 20 Sep 2026 20:24:01 +0100
Subject: [PATCH] Add client DNS config when client allows all IPs

---
 src/functions/backend/setup/setup-wireguard-client.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/functions/backend/setup/setup-wireguard-client.ts b/src/functions/backend/setup/setup-wireguard-client.ts
index 5d1faef..0b5c85a 100644
--- a/src/functions/backend/setup/setup-wireguard-client.ts
+++ b/src/functions/backend/setup/setup-wireguard-client.ts
@@ -125,7 +125,9 @@ export default async function setupWireguardClient({
         sh += `[Interface]\n`;
         sh += `Address = ${CLIENT_WG_IP}/32\n`;
         sh += `PrivateKey = ${CLIENT_PRIVATE_KEY}\n`;
-        // sh += `DNS = 1.1.1.1\n`;
+        if (client?.allow_all_ips == 1) {
+            sh += `DNS = 1.1.1.1\n`;
+        }
         sh += `\n`;
         sh += `[Peer]\n`;
         sh += `PublicKey = ${HOST_PUBLIC_KEY}\n`;