blog/content/posts/commits/2026-06-14-commit-813029b.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] feat(lightsail): version nginx + c2-vpn-relay configs	2026-06-14T23:19:57+02:00	false	commit bojemoi main	Git Activity	Commit 813029b par Betty dans bojemoi	Betty

Commit 813029b

Repository	bojemoi
Branch	main
Author	Betty
Hash	813029b9bf240a4a7c8f1c582871e7529cc43d1c

Description

• lightsail/etc/nginx/nginx.conf: stream block SNI routing (443→4443, 4444→lab)
• lightsail/etc/nginx/conf.d/grafana.conf: proxy grafana.bojemoi.me → lab via VPN (port 4443)
• lightsail/etc/systemd/system/c2-vpn-relay.service: route 10.8.0.0/16 + MASQUERADE tun0 au boot
• lightsail/usr/local/bin/c2-vpn-relay-start.sh: attend tun0 actif avant MASQUERADE (fix post-reboot)

Fix: nginx crashait au reboot (listen 443 ssl en double avec stream block) Fix: MASQUERADE tun0 perdu après reboot → Grafana/C2 inaccessibles depuis Lightsail

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

A	lightsail/etc/nginx/conf.d/grafana.conf
A	lightsail/etc/nginx/nginx.conf
A	lightsail/etc/systemd/system/c2-vpn-relay.service
A	lightsail/usr/local/bin/c2-vpn-relay-start.sh

Diff Summary

 lightsail/etc/nginx/conf.d/grafana.conf           | 31 ++++++++++
 lightsail/etc/nginx/nginx.conf                    | 72 +++++++++++++++++++++++
 lightsail/etc/systemd/system/c2-vpn-relay.service | 14 +++++
 lightsail/usr/local/bin/c2-vpn-relay-start.sh     |  8 +++
 4 files changed, 125 insertions(+)