post: commit d6145d3 in bojemoi

content/posts/commits/2026-05-01-commit-d6145d3.md

@@ -0,0 +1,55 @@
+---
+title: "[bojemoi] feat(c2): chain complète bojemoi.me:8443 → VPN → lab + Fly.io TCP stream prêt"
+date: 2026-05-01T13:55:02+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit d6145d3 par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `d6145d3`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `d6145d31a1ae31effb0000facb5b2f532cccfc30` |
+
+
+### Description
+
+Infrastructure C2 :
+- bojemoi.me:8443 : nginx TCP stream relay → VPN (10.8.0.18:4444) → Traefik → msf-teamserver
+- CCD lab-manager : ifconfig-push 10.8.0.18 10.8.0.17 (IP statique)
+- systemd c2-vpn-relay.service : host route + MASQUERADE persistants après reboot
+- uzi : C2_REDIRECTORS=3.74.140.72, LPORT=8443 (bojemoi.me direct)
+
+Redirecteur Fly.io (redirector-1) :
+- nginx.conf : ajout stream {} block TCP relay :443 → RELAY_HOST:RELAY_PORT
+- Dockerfile : +libnginx-mod-stream
+- c2-proxy.conf : simplifié (decoy HTTP :80 uniquement, :443 géré par stream)
+- Image buildée localhost:5000/c2-redirector:latest — déploiement Fly.io après fly auth login
+- Quand déployé : C2_REDIRECTORS=37.16.12.4 et LPORT=443
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	redirector/Dockerfile
+M	redirector/c2-proxy.conf
+M	redirector/nginx.conf
+M	stack/40-service-borodino.yml
+```
+
+### Diff Summary
+
+```
+ redirector/Dockerfile         |  7 +++++--
+ redirector/c2-proxy.conf      | 34 +---------------------------------
+ redirector/nginx.conf         | 16 ++++++++++++++++
+ stack/40-service-borodino.yml |  9 ++++-----
+ 4 files changed, 26 insertions(+), 40 deletions(-)
+```