From de6c9562f1fadd169f8f30994ae5ea1996733e98 Mon Sep 17 00:00:00 2001 From: Ultradesu Date: Wed, 30 Sep 2026 13:53:38 +0100 Subject: [PATCH] Update AmneziaWG port to 443, refresh obfuscation params and update fellow image to 1.0.2 --- k8s/apps/amnezia/configmap-scripts.yaml | 10 ++++----- k8s/apps/amnezia/daemonset.yaml | 10 ++++----- k8s/apps/amnezia/external-secrets.yaml | 28 ++++++++++++------------- k8s/apps/amnezia/fellow-deployment.yaml | 2 +- 4 files changed, 25 insertions(+), 25 deletions(-) diff --git a/k8s/apps/amnezia/configmap-scripts.yaml b/k8s/apps/amnezia/configmap-scripts.yaml index cc5a4a8..35c04f4 100644 --- a/k8s/apps/amnezia/configmap-scripts.yaml +++ b/k8s/apps/amnezia/configmap-scripts.yaml @@ -8,7 +8,7 @@ data: #!/usr/bin/env bash set -euo pipefail - PORT="${1:-5847}" + PORT="${1:-443}" VPN_CIDR="${2:-10.8.0.0/16}" POLICY_FILE="${3:-/run/amnezia/policy/policy.conf}" FORWARD_CHAIN="AMNEZIAWG-FORWARD" @@ -187,7 +187,7 @@ data: #!/usr/bin/env bash set -euo pipefail - PORT="${1:-5847}" + PORT="${1:-443}" VPN_CIDR="${2:-10.8.0.0/16}" FORWARD_CHAIN="AMNEZIAWG-FORWARD" POLICY_CHAIN_A="AMNEZIAWG-POLICY-A" @@ -245,7 +245,7 @@ data: #!/usr/bin/env bash set -euo pipefail - PORT="${1:-5847}" + PORT="${1:-443}" VPN_CIDR="${2:-10.8.0.0/16}" FORWARD_CHAIN="AMNEZIAWG-FORWARD" IPTABLES=(iptables -w 5) @@ -372,12 +372,12 @@ data: apply_live_config() { # Fail closed during a peer/key and policy transition. /dev/null produces # an Internet-only policy with all awg0-to-awg0 traffic isolated. - /scripts/firewall-up.sh 5847 10.8.0.0/16 /dev/null + /scripts/firewall-up.sh 443 10.8.0.0/16 /dev/null render_config awg-quick strip "${RUNTIME_CONFIG}" > "${SYNC_CONFIG}" chmod 0600 "${SYNC_CONFIG}" awg syncconf awg0 "${SYNC_CONFIG}" - /scripts/firewall-up.sh 5847 10.8.0.0/16 "${POLICY_FILE}" + /scripts/firewall-up.sh 443 10.8.0.0/16 "${POLICY_FILE}" } watch_client_config() { diff --git a/k8s/apps/amnezia/daemonset.yaml b/k8s/apps/amnezia/daemonset.yaml index f4b6c56..16bc80d 100644 --- a/k8s/apps/amnezia/daemonset.yaml +++ b/k8s/apps/amnezia/daemonset.yaml @@ -52,7 +52,7 @@ spec: fieldRef: fieldPath: spec.nodeName - name: PORT - value: "5847" + value: "443" command: - /bin/bash - -lc @@ -116,14 +116,14 @@ spec: - /scripts/run.sh ports: - name: awg - containerPort: 5847 + containerPort: 443 protocol: UDP readinessProbe: exec: command: - /bin/bash - -lc - - /scripts/firewall-check.sh 5847 10.8.0.0/16 + - /scripts/firewall-check.sh 443 10.8.0.0/16 initialDelaySeconds: 5 periodSeconds: 10 timeoutSeconds: 8 @@ -133,7 +133,7 @@ spec: command: - /bin/bash - -lc - - /scripts/firewall-check.sh 5847 10.8.0.0/16 || /scripts/firewall-up.sh 5847 10.8.0.0/16 + - /scripts/firewall-check.sh 443 10.8.0.0/16 || /scripts/firewall-up.sh 443 10.8.0.0/16 periodSeconds: 5 timeoutSeconds: 15 failureThreshold: 12 @@ -142,7 +142,7 @@ spec: command: - /bin/bash - -lc - - /scripts/firewall-check.sh 5847 10.8.0.0/16 || /scripts/firewall-up.sh 5847 10.8.0.0/16 + - /scripts/firewall-check.sh 443 10.8.0.0/16 || /scripts/firewall-up.sh 443 10.8.0.0/16 initialDelaySeconds: 30 periodSeconds: 30 timeoutSeconds: 15 diff --git a/k8s/apps/amnezia/external-secrets.yaml b/k8s/apps/amnezia/external-secrets.yaml index f498f8b..3ad2bb4 100644 --- a/k8s/apps/amnezia/external-secrets.yaml +++ b/k8s/apps/amnezia/external-secrets.yaml @@ -16,21 +16,21 @@ spec: [Interface] PrivateKey = {{ .server_private_key }} Address = 10.8.0.1/16 - ListenPort = 5847 + ListenPort = 443 MTU = 1376 - Jc = 4 - Jmin = 64 - Jmax = 128 - S1 = 15 - S2 = 18 - S3 = 20 - S4 = 23 - H1 = 1020325451 - H2 = 3288052141 - H3 = 1766607858 - H4 = 2528465083 - PostUp = /scripts/firewall-up.sh 5847 10.8.0.0/16 - PostDown = /scripts/firewall-down.sh 5847 10.8.0.0/16 + Jc = 5 + Jmin = 96 + Jmax = 320 + S1 = 37 + S2 = 47 + S3 = 29 + S4 = 43 + H1 = 1247270921 + H2 = 1956534873 + H3 = 886504771 + H4 = 1623791047 + PostUp = /scripts/firewall-up.sh 443 10.8.0.0/16 + PostDown = /scripts/firewall-down.sh 443 10.8.0.0/16 data: - secretKey: server_private_key sourceRef: diff --git a/k8s/apps/amnezia/fellow-deployment.yaml b/k8s/apps/amnezia/fellow-deployment.yaml index e8860c5..1b65b8e 100644 --- a/k8s/apps/amnezia/fellow-deployment.yaml +++ b/k8s/apps/amnezia/fellow-deployment.yaml @@ -25,7 +25,7 @@ spec: kubernetes.io/hostname: cy.tail2fe2d.ts.net containers: - name: amnezia-fellow - image: ultradesu/amnezia-fellow:latest + image: ultradesu/amnezia-fellow:1.0.2 imagePullPolicy: Always ports: - name: http