hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: topic notes 2026-07-09 (keys-wire, ipv6, castopod, …)

Browse source
This commit is contained in:
Hernâni Marques 2026-07-09 22:54:08 +02:00
parent 547f0e27ce
commit 86502f5ced
No known key found for this signature in database
11 changed files with 520 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

34
2026/2026-07-09--ipv6-15d6.md Normal file
View file

@ -0,0 +1,34 @@
# 2026-07-09 — IPv6 `:15d6` reachability
## Symptom
`https://exchange.hacktivism.ch/config` failed with `ERR_ADDRESS_UNREACHABLE`
when clients preferred AAAA `2a02:168:53a8:0:d584:9e34:13cf:15d6`.
IPv4 `212.51.151.254` worked (HTTP 200).
## Path comparison
| | IPv4 | IPv6 |
|--|------|------|
| Public endpoint | WAN IP DNAT | Host global `:15d6` |
| VeciGate | dstnat 443→9001 | forward 443 (no NAT) |
| Host listener | Caddy `:9001` | `https-proxy.socket` `:443` → 9001 |
| firewalld needed | 9001 | **443** (+ 80 for ACME) |
## Fix applied
```bash
# on koopa (root)
firewall-cmd --permanent --zone=public --add-port=443/tcp
firewall-cmd --reload
```
VeciGate: confirmed IPv6 filter allow 443; added explicit allow **80** for ACME.
## Verify
```bash
curl -6 -sS -o /dev/null -w '%{http_code} %{remote_ip}\n' \
https://exchange.hacktivism.ch/config
# 200 2a02:168:53a8:0:d584:9e34:13cf:15d6
```