post: commit 813029b in bojemoi

content/posts/commits/2026-06-14-commit-813029b.md

@@ -0,0 +1,50 @@
+---
+title: "[bojemoi] feat(lightsail): version nginx + c2-vpn-relay configs"
+date: 2026-06-14T23:19:57+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 813029b par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `813029b`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `813029b9bf240a4a7c8f1c582871e7529cc43d1c` |
+
+
+### Description
+
+- lightsail/etc/nginx/nginx.conf: stream block SNI routing (443→4443, 4444→lab)
+- lightsail/etc/nginx/conf.d/grafana.conf: proxy grafana.bojemoi.me → lab via VPN (port 4443)
+- lightsail/etc/systemd/system/c2-vpn-relay.service: route 10.8.0.0/16 + MASQUERADE tun0 au boot
+- lightsail/usr/local/bin/c2-vpn-relay-start.sh: attend tun0 actif avant MASQUERADE (fix post-reboot)
+
+Fix: nginx crashait au reboot (listen 443 ssl en double avec stream block)
+Fix: MASQUERADE tun0 perdu après reboot → Grafana/C2 inaccessibles depuis Lightsail
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+A	lightsail/etc/nginx/conf.d/grafana.conf
+A	lightsail/etc/nginx/nginx.conf
+A	lightsail/etc/systemd/system/c2-vpn-relay.service
+A	lightsail/usr/local/bin/c2-vpn-relay-start.sh
+```
+
+### Diff Summary
+
+```
+ lightsail/etc/nginx/conf.d/grafana.conf           | 31 ++++++++++
+ lightsail/etc/nginx/nginx.conf                    | 72 +++++++++++++++++++++++
+ lightsail/etc/systemd/system/c2-vpn-relay.service | 14 +++++
+ lightsail/usr/local/bin/c2-vpn-relay-start.sh     |  8 +++
+ 4 files changed, 125 insertions(+)
+```