Network

Interface	Address	Role
eno1	192.168.100.95/24	LAN (default route via VeciGate)
eno1	2a02:168:53a8::/64 (dynamic)	Global IPv6 (AAAA for taler/exchange)
lo	127.0.0.1	local

SSH: LAN :22, WAN via VeciGate 23235 → :22.
Tor ORPort: :8080 (WAN DNAT on VeciGate).