--- title: "[bojemoi] feat(c2): chain complète bojemoi.me:8443 → VPN → lab + Fly.io TCP stream prêt" date: 2026-05-01T13:55:02+02:00 draft: false tags: ["commit", "bojemoi", "main"] categories: ["Git Activity"] summary: "Commit d6145d3 par Betty dans bojemoi" author: "Betty" --- ## Commit `d6145d3` | | | |---|---| | **Repository** | bojemoi | | **Branch** | `main` | | **Author** | Betty | | **Hash** | `d6145d31a1ae31effb0000facb5b2f532cccfc30` | ### Description Infrastructure C2 : - bojemoi.me:8443 : nginx TCP stream relay → VPN (10.8.0.18:4444) → Traefik → msf-teamserver - CCD lab-manager : ifconfig-push 10.8.0.18 10.8.0.17 (IP statique) - systemd c2-vpn-relay.service : host route + MASQUERADE persistants après reboot - uzi : C2_REDIRECTORS=3.74.140.72, LPORT=8443 (bojemoi.me direct) Redirecteur Fly.io (redirector-1) : - nginx.conf : ajout stream {} block TCP relay :443 → RELAY_HOST:RELAY_PORT - Dockerfile : +libnginx-mod-stream - c2-proxy.conf : simplifié (decoy HTTP :80 uniquement, :443 géré par stream) - Image buildée localhost:5000/c2-redirector:latest — déploiement Fly.io après fly auth login - Quand déployé : C2_REDIRECTORS=37.16.12.4 et LPORT=443 Co-Authored-By: Claude Sonnet 4.6 ### Files Changed ``` M redirector/Dockerfile M redirector/c2-proxy.conf M redirector/nginx.conf M stack/40-service-borodino.yml ``` ### Diff Summary ``` redirector/Dockerfile | 7 +++++-- redirector/c2-proxy.conf | 34 +--------------------------------- redirector/nginx.conf | 16 ++++++++++++++++ stack/40-service-borodino.yml | 9 ++++----- 4 files changed, 26 insertions(+), 40 deletions(-) ```