---
title: "[borodino] refactor: supprimer wg-gateway partout, scan direct depuis IP lab"
date: 2026-07-07T00:05:37+02:00
draft: false
tags: ["commit", "borodino", "main"]
categories: ["Git Activity"]
summary: "Commit 124280f par Claude Code dans borodino"
author: "Claude Code"
---

## Commit `124280f`

| | |
|---|---|
| **Repository** | borodino |
| **Branch** | `main` |
| **Author** | Claude Code |
| **Hash** | `124280f8485c604091fb4d077d4c8ab994a7bfb0` |


### Description

- Stack: retire scan_net, route_setup config, SCAN_GATEWAY_HOST et
  route-setup.sh de tous les services (zaproxy, zap-scanner, bm12,
  uzi, masscan, nuclei-worker, nuclei-api, sliver-worker)
- ak47: simplifie flags nmap (retire -f --mtu 16 --data-length 64
  --spoof-mac 0 incompatibles avec le routing direct)
- wg-gateway container stoppé sur meta-68

nmap -sS + NAT ProtonVPN = SYN-ACK droppé (pas de session établie)
Scan direct depuis l'IP du lab permet à -sS de fonctionner correctement.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	stack/40-service-borodino.yml
M	thearm_ak47
```

### Diff Summary

```
 stack/40-service-borodino.yml | 59 ++++++++-----------------------------------
 thearm_ak47                   |  2 +-
 2 files changed, 11 insertions(+), 50 deletions(-)
```