post: commit df7eedf in borodino

content/posts/commits/2026-07-06-commit-df7eedf.md

@@ -0,0 +1,46 @@
+---
+title: "[borodino] fix(ak47): scan direct sans VPN + patch wg-gateway up/down scripts"
+date: 2026-07-06T23:22:46+02:00
+draft: false
+tags: ["commit", "borodino", "main"]
+categories: ["Git Activity"]
+summary: "Commit df7eedf par Claude Code dans borodino"
+author: "Claude Code"
+---
+
+## Commit `df7eedf`
+
+| | |
+|---|---|
+| **Repository** | borodino |
+| **Branch** | `main` |
+| **Author** | Claude Code |
+| **Hash** | `df7eedf761a4efa8b8f3487e6b0dcd14a316fae1` |
+
+
+### Description
+
+- ak47: retire SCAN_GATEWAY_HOST et route-setup.sh wrapper
+  nmap -sS (raw socket) incompatible avec NAT ProtonVPN — les SYN-ACK
+  retournent sur l'IP VPN sans session établie → 0 hosts up permanent
+  Solution: scan direct depuis l'IP du lab, VPN reste pour bm12/uzi
+
+- wg-gateway: filtre directives 'up' et 'down' du profil ovpn
+  Le profil NL référençait /etc/openvpn/update-resolv-conf absent
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/40-service-borodino.yml
+M	wg-gateway-start.sh
+```
+
+### Diff Summary
+
+```
+ stack/40-service-borodino.yml | 3 +--
+ wg-gateway-start.sh           | 2 +-
+ 2 files changed, 2 insertions(+), 3 deletions(-)
+```