diff --git a/DEPLOYMENT-NOTES b/DEPLOYMENT-NOTES index c827587..1932207 100644 --- a/DEPLOYMENT-NOTES +++ b/DEPLOYMENT-NOTES @@ -44,12 +44,35 @@ OpenSSH SFTP Chroot (part of seedbox): Pleroma: - Migration might be needed between upgrades (/pleroma/bin/pleroma_ctl migrate) -Wireguard: - - Requires the following iptables rules other than the port opening +Wireguard & FastD: + - Require the following forwarding rules ``` *filter -A FORWARD -i rxmain -o eth0 -j ACCEPT -A FORWARD -i eth0 -o rxmain -j ACCEPT + -A FORWARD -i rxmain -o crxn0 -j ACCEPT + -A FORWARD -i crxn0 -o rxmain -j ACCEPT *nat -A POSTROUTING -o eth0 -j MASQUERADE + -A POSTROUTING -o crxn0 -j MASQUERADE + ``` + +FastD: + - Requires forwarding on router so that nodes can comminicate via the router + ``` + -A FORWARD -i crxn0 -o crxn0 -j ACCEPT + ``` + - Router requires this on up + ``` + ip -6 addr add fd8a:6111:3b1a:X::1/64 scope global dev $INTERFACE + ip -6 route add fd8a:6111:3b1a:X::1/64 dev $INTERFACE protocol static + ip link set $INTERFACE up + ``` + - Clients require this on up + ``` + ip -6 addr add fd8a:6111:3b1a:X::Y/64 scope global dev $INTERFACE + ip link set $INTERFACE up + ip -6 route add fd8a:6111:3b1a::/48 via fd8a:6111:3b1a:X::1 dev $INTERFACE + ip -6 route add fd8a:6111:3b1a:X::/64 via fd8a:6111:3b1a:X::1 dev $INTERFACE + ip -6 route del fd8a:6111:3b1a:X::/64 dev $INTERFACE ``` diff --git a/config/unbound/APKBUILD b/config/unbound/APKBUILD index ec77119..cfe1b60 100644 --- a/config/unbound/APKBUILD +++ b/config/unbound/APKBUILD @@ -4,8 +4,8 @@ _svcname=unbound . ../APKBUILD-config.common -pkgver=2021.02.17 -pkgrel=4 +pkgver=2021.02.18 +pkgrel=0 depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root" makedepends="redxen-secret-opendkim-dns" checkdepends="bind-tools unbound" @@ -73,4 +73,4 @@ d94ad338e2ea43c3ecdc62c861eddc0bb706807b738dd985309bcdf0b5fb435d7260bf272e2bbe40 28c917fe7f69643887097553312c4f1ffc747dffdbf150430e6c4b2e5833567922810716cb59a27887915664777ac3263be3c826956f504499f0ebdcc0b3aac5 auth-redxen.conf 91847e65c48e585f298bb766b2b20c43f5380686b594233da3b722962b03f2f4c858bf299b745027dadd184408a87b1e85ebf03b027196756455afea69f79cf9 auth-crxn.conf b82efa5e5c796a5cadf08ac5bf54a79211318662680eb48e4d680655deecd88c5aabc4bd674fd24a402900adeaad3703af2aee5af221a0baec8e422b4e1017d3 redxen.eu -5811c16899b9d3463836ef9f58ae97cb62b32d305ae9e2e9933e76f9463ff33bf47c21e491559fbe4bbd5842c4c164c8bb53f692c9e145206c38f4f576f55cdf crxn" +1e4586b4746d9f154c355cf62131c1f7e3ff49f2deb728b8b4990f034bd3c2c135f2209432b01911dc74fd4f012413b2829a1d3e625456768dccc68ef891221a crxn" diff --git a/config/unbound/zones/crxn b/config/unbound/zones/crxn index 9ae8884..42b7427 100644 --- a/config/unbound/zones/crxn +++ b/config/unbound/zones/crxn @@ -57,6 +57,7 @@ router3.deavmi IN A 10.6.3.1 ; Gustav ; excalibur.gustav IN A 10.6.4.1 +excalibur.gustav IN AAAA fd8a:6111:3b1a:ffff::1 arthur.gustav IN A 10.6.4.3 ;