From 4c7ff9d6a0b74c493ac3f708ce98deeab28edebd Mon Sep 17 00:00:00 2001
From: alexz <me@alexzaw.dev>
Date: Sat, 17 Jan 2026 16:49:32 +0000
Subject: [PATCH] fix(cistech-tunnel): reset DNS and clean tun interface before
 connecting

---
 apps/cistech-tunnel/shared/openconnect-vpn | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/apps/cistech-tunnel/shared/openconnect-vpn b/apps/cistech-tunnel/shared/openconnect-vpn
index 90a14af..4058df8 100755
--- a/apps/cistech-tunnel/shared/openconnect-vpn
+++ b/apps/cistech-tunnel/shared/openconnect-vpn
@@ -376,6 +376,14 @@ connect_vpn() {
     # Kill any existing VPN processes
     kill_vpn_processes
 
+    # Reset DNS to public servers (VPN script may have overwritten it)
+    log DEBUG "Resetting DNS to public servers..."
+    echo "nameserver 8.8.8.8" > /etc/resolv.conf
+    echo "nameserver 1.1.1.1" >> /etc/resolv.conf
+
+    # Clean up stale tun interface
+    ip link delete tun0 2>/dev/null || true
+
     # Validate required variables
     if [[ -z "$VPN_HOST" ]]; then
         log ERROR "VPN_HOST is not set"