ab/homelab
1
1 Fork 1
Code Issues Pull Requests 171 Actions Packages Wiki Activity

Update AmneziaWG port to 443, refresh obfuscation params and update fellow image to 1.0.2
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 17s
Details
Check with kubeconform / lint (push) Failing after 7m19s
Details
Auto-update README / Generate README and Create MR (push) Successful in 4m32s
Details

Browse Source
This commit is contained in:
Ultradesu committed 2026-09-30 13:53:38 +01:00
1 parent 0c333375a5
commit de6c9562f1
4 files changed
+25 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

k8s/apps/amnezia/configmap-scripts.yaml
+5 -5
View File
@@ -8,7 +8,7 @@ data:
#!/usr/bin/env bash
set -euo pipefail
PORT="${1:-5847}"
PORT="${1:-443}"
VPN_CIDR="${2:-10.8.0.0/16}"
POLICY_FILE="${3:-/run/amnezia/policy/policy.conf}"
FORWARD_CHAIN="AMNEZIAWG-FORWARD"
@@ -187,7 +187,7 @@ data:
#!/usr/bin/env bash
set -euo pipefail
PORT="${1:-5847}"
PORT="${1:-443}"
VPN_CIDR="${2:-10.8.0.0/16}"
FORWARD_CHAIN="AMNEZIAWG-FORWARD"
POLICY_CHAIN_A="AMNEZIAWG-POLICY-A"
@@ -245,7 +245,7 @@ data:
#!/usr/bin/env bash
set -euo pipefail
PORT="${1:-5847}"
PORT="${1:-443}"
VPN_CIDR="${2:-10.8.0.0/16}"
FORWARD_CHAIN="AMNEZIAWG-FORWARD"
IPTABLES=(iptables -w 5)
@@ -372,12 +372,12 @@ data:
apply_live_config() {
# Fail closed during a peer/key and policy transition. /dev/null produces
# an Internet-only policy with all awg0-to-awg0 traffic isolated.
/scripts/firewall-up.sh 5847 10.8.0.0/16 /dev/null
/scripts/firewall-up.sh 443 10.8.0.0/16 /dev/null
render_config
awg-quick strip "${RUNTIME_CONFIG}" > "${SYNC_CONFIG}"
chmod 0600 "${SYNC_CONFIG}"
awg syncconf awg0 "${SYNC_CONFIG}"
/scripts/firewall-up.sh 5847 10.8.0.0/16 "${POLICY_FILE}"
/scripts/firewall-up.sh 443 10.8.0.0/16 "${POLICY_FILE}"
}
watch_client_config() {
k8s/apps/amnezia/daemonset.yaml
+5 -5
View File
@@ -52,7 +52,7 @@ spec:
fieldRef:
fieldPath: spec.nodeName
- name: PORT
value: "5847"
value: "443"
command:
- /bin/bash
- -lc
@@ -116,14 +116,14 @@ spec:
- /scripts/run.sh
ports:
- name: awg
containerPort: 5847
containerPort: 443
protocol: UDP
readinessProbe:
exec:
command:
- /bin/bash
- -lc
- /scripts/firewall-check.sh 5847 10.8.0.0/16
- /scripts/firewall-check.sh 443 10.8.0.0/16
initialDelaySeconds: 5
periodSeconds: 10
timeoutSeconds: 8
@@ -133,7 +133,7 @@ spec:
command:
- /bin/bash
- -lc
- /scripts/firewall-check.sh 5847 10.8.0.0/16 || /scripts/firewall-up.sh 5847 10.8.0.0/16
- /scripts/firewall-check.sh 443 10.8.0.0/16 || /scripts/firewall-up.sh 443 10.8.0.0/16
periodSeconds: 5
timeoutSeconds: 15
failureThreshold: 12
@@ -142,7 +142,7 @@ spec:
command:
- /bin/bash
- -lc
- /scripts/firewall-check.sh 5847 10.8.0.0/16 || /scripts/firewall-up.sh 5847 10.8.0.0/16
- /scripts/firewall-check.sh 443 10.8.0.0/16 || /scripts/firewall-up.sh 443 10.8.0.0/16
initialDelaySeconds: 30
periodSeconds: 30
timeoutSeconds: 15
k8s/apps/amnezia/external-secrets.yaml
+14 -14
View File
@@ -16,21 +16,21 @@ spec:
[Interface]
PrivateKey = {{ .server_private_key }}
Address = 10.8.0.1/16
ListenPort = 5847
ListenPort = 443
MTU = 1376
Jc = 4
Jmin = 64
Jmax = 128
S1 = 15
S2 = 18
S3 = 20
S4 = 23
H1 = 1020325451
H2 = 3288052141
H3 = 1766607858
H4 = 2528465083
PostUp = /scripts/firewall-up.sh 5847 10.8.0.0/16
PostDown = /scripts/firewall-down.sh 5847 10.8.0.0/16
Jc = 5
Jmin = 96
Jmax = 320
S1 = 37
S2 = 47
S3 = 29
S4 = 43
H1 = 1247270921
H2 = 1956534873
H3 = 886504771
H4 = 1623791047
PostUp = /scripts/firewall-up.sh 443 10.8.0.0/16
PostDown = /scripts/firewall-down.sh 443 10.8.0.0/16
data:
- secretKey: server_private_key
sourceRef:
k8s/apps/amnezia/fellow-deployment.yaml
+1 -1
View File
@@ -25,7 +25,7 @@ spec:
kubernetes.io/hostname: cy.tail2fe2d.ts.net
containers:
- name: amnezia-fellow
image: ultradesu/amnezia-fellow:latest
image: ultradesu/amnezia-fellow:1.0.2
imagePullPolicy: Always
ports:
- name: http