qusal/salt/sys-pihole/files/server/network-hooks.d/50-sys-pihole.sh

#!/bin/sh

# SPDX-FileCopyrightText: 2022 - 2023 unman <unman@thirdeyesecurity.org>
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later

set -eu

nft -f /rw/config/qubes-firewall.d/50-sys-pihole

for vif in /proc/sys/net/ipv4/conf/vif*/route_localnet; do
  test -w "${vif}" || continue
  echo 1 | tee "${vif}" >/dev/null
done