Oh yes, I do have Tailscale VPN enabled.
I haven’t noticed any issues, but normally I would expect to be able to choose which DNS servers I want to use, whether public or private, and have my settings saved without them automatically reverting.
The IP 100.100.100.100 is a Carrier-Grade NAT (CGNAT) / Cloud Provider internal resolver (frequently pushed by cloud VPS providers like Alibaba Cloud via DHCP).
Every time your network interface renews its DHCP lease or restarts NetworkManager, the cloud DHCP client overwrites /etc/resolv.conf, reverting whatever you typed in FreePBX System Admin.
Here is how to lock your preferred DNS permanently via SSH:
Option A: Force DHCP client to override DNS
Edit /etc/dhcp/dhclient.conf and add:
supersede domain-name-servers 8.8.8.8, 1.1.1.1;
Then restart the network service.
Option B: Lock /etc/resolv.conf with immutable attribute
Write your nameservers directly into /etc/resolv.conf: