51 lines
1.5 KiB
Markdown
51 lines
1.5 KiB
Markdown
---
|
|
title: "[bojemoi] feat(lightsail): version nginx + c2-vpn-relay configs"
|
|
date: 2026-06-14T23:19:57+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 813029b par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `813029b`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `813029b9bf240a4a7c8f1c582871e7529cc43d1c` |
|
|
|
|
|
|
### Description
|
|
|
|
- lightsail/etc/nginx/nginx.conf: stream block SNI routing (443→4443, 4444→lab)
|
|
- lightsail/etc/nginx/conf.d/grafana.conf: proxy grafana.bojemoi.me → lab via VPN (port 4443)
|
|
- lightsail/etc/systemd/system/c2-vpn-relay.service: route 10.8.0.0/16 + MASQUERADE tun0 au boot
|
|
- lightsail/usr/local/bin/c2-vpn-relay-start.sh: attend tun0 actif avant MASQUERADE (fix post-reboot)
|
|
|
|
Fix: nginx crashait au reboot (listen 443 ssl en double avec stream block)
|
|
Fix: MASQUERADE tun0 perdu après reboot → Grafana/C2 inaccessibles depuis Lightsail
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
A lightsail/etc/nginx/conf.d/grafana.conf
|
|
A lightsail/etc/nginx/nginx.conf
|
|
A lightsail/etc/systemd/system/c2-vpn-relay.service
|
|
A lightsail/usr/local/bin/c2-vpn-relay-start.sh
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
lightsail/etc/nginx/conf.d/grafana.conf | 31 ++++++++++
|
|
lightsail/etc/nginx/nginx.conf | 72 +++++++++++++++++++++++
|
|
lightsail/etc/systemd/system/c2-vpn-relay.service | 14 +++++
|
|
lightsail/usr/local/bin/c2-vpn-relay-start.sh | 8 +++
|
|
4 files changed, 125 insertions(+)
|
|
```
|