andreasandClaude Sonnet 5.5 11d3fccf75 nftables: don't masquerade traffic leaving via ZeroTier ...

Hosts on the van LAN were all NATed to the router's ZT address when
reaching ZeroTier peers, hiding real source IPs from logs and
source-based firewall rules. Exclude ztuga7c2kh alongside br0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-17 09:45:03 -04:00

..

.van-ap-dnsmasq.conf.swp

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

10-van-ap.network

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

10-van-ap.network.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

11-van-ap-2g.network

deploy: hardware-instance templating, wlan0 boot watchdog, deploy-time warnings in Cockpit

2026-08-01 11:25:11 -04:00

20-van-br0.netdev

Template hostapd interface/SSIDs/5GHz radio lines; guard against other-host hardcodes

2026-09-23 14:48:22 -04:00

20-van-br0.netdev.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

21-van-br0.network

Make router IP address configurable via deploy.conf

2026-09-18 17:31:18 -04:00

21-van-br0.network.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

22-van-lan.network

deploy: host config from /etc/vanlink.conf (hosts/<hostname>.conf)

2026-09-23 14:28:11 -04:00

22-van-lan.network.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

23-van-lan-eth0.network

Template remaining host-specific values (WAN wifi, LAN/eth0, NVMe, nftables)

2026-09-23 14:32:09 -04:00

23-van-lan-eth0.network.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

50-van-wan-wifi.yaml

Template NM WAN pieces: netplan split, cellular keyfile, new host variables

2026-09-23 18:27:19 -04:00

50-van-wan.yaml

netplan: restore the Pi-identical comment; rollback re-runs van-br0-setup

2026-09-23 19:54:25 -04:00

80-regdomain.rules

Fix regulatory domain persistence for 5GHz AP on boot

2026-09-18 18:45:59 -04:00

99-van-router-dns.conf

Docs: shared checkout model, /etc/vanlink.conf references

2026-09-23 14:39:22 -04:00

99-van-router.conf

sysctl: correct the use_tempaddr comment with the real root cause

2026-07-13 13:13:08 -04:00

cellular.nmconnection

Template NM WAN pieces: netplan split, cellular keyfile, new host variables

2026-09-23 18:27:19 -04:00

default-hostapd

initial commit

2026-06-28 15:09:28 -04:00

hostapd-2g.conf

Template hostapd interface/SSIDs/5GHz radio lines; guard against other-host hardcodes

2026-09-23 14:48:22 -04:00

hostapd-2g.service

Docs: shared checkout model, /etc/vanlink.conf references

2026-09-23 14:39:22 -04:00

hostapd-regdomain.conf

Fix regulatory domain persistence for 5GHz AP on boot

2026-09-18 18:45:59 -04:00

hostapd-restart.conf

ap: keep AP beaconing across USB re-enumeration

2026-07-01 14:36:14 -04:00

hostapd.conf

Template hostapd interface/SSIDs/5GHz radio lines; guard against other-host hardcodes

2026-09-23 14:48:22 -04:00

hostapd.conf.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

install-rtw89-driver.sh

ap: switch 5GHz driver to out-of-tree morrownr/rtw89 for USB3 support

2026-08-23 15:42:23 -04:00

nftables.conf

nftables: don't masquerade traffic leaving via ZeroTier

2026-10-17 09:45:03 -04:00

nftables.conf.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

nm-no-auto-default.conf

deploy: find cellular profile by id, no-auto-default NM conf, warn on NM enable failure

2026-09-23 18:33:38 -04:00

nm-uplink-pending.conf

apply-network: final-review fixes (diagnostics, NM off the uplink until handover, preflight, stricter stage 2)

2026-09-23 19:41:02 -04:00

regdomain.service

Fix regulatory domain persistence for 5GHz AP on boot

2026-09-18 18:45:59 -04:00

rtl8188gu-modeswitch.conf

Add usb-modeswitch config for RTL8188GU CDROM mode bypass

2026-09-19 10:06:16 -04:00

rtw89.conf

ap: switch 5GHz driver to out-of-tree morrownr/rtw89 for USB3 support

2026-08-23 15:42:23 -04:00

systemd-resolved-disable.conf

Disable systemd-resolved DNS to allow dnsmasq DHCP

2026-09-19 11:57:42 -04:00

van-ap-dnsmasq.conf

Make router IP address configurable via deploy.conf

2026-09-18 17:31:18 -04:00

van-ap-dnsmasq.conf.bak

Fix watchdog timeout and MQTT connectivity issues

2026-09-18 18:20:11 -04:00

van-ap-dnsmasq.service

Fix dnsmasq startup dependency: require bridge setup before DHCP

2026-09-19 08:11:12 -04:00

van-ap-unmanaged.conf

Template remaining host-specific values (WAN wifi, LAN/eth0, NVMe, nftables)

2026-09-23 14:32:09 -04:00

van-ap-watchdog

ap: fix driver_name() silently caching wrong value on startup race

2026-08-23 14:49:27 -04:00

van-ap-watchdog-2g.service

ap: parallel 2.4GHz AP (hostapd-2g) on the Linksys WUSB6300v2 dongle

2026-07-06 10:03:16 -04:00

van-ap-watchdog.service

ap: keep AP beaconing across USB re-enumeration

2026-07-01 14:36:14 -04:00

van-br0-setup.service

Template remaining host-specific values (WAN wifi, LAN/eth0, NVMe, nftables)

2026-09-23 14:32:09 -04:00