viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add IPv6 connectivity via Hurricane Electric 6in4 tunnel

Browse source 
- Add public_ipv6 variable and AAAA records for all 34 non-proxied services
- Fix stale DNS records (85.130.108.6 → 176.12.22.76, old IPv6 → HE tunnel)
- Update SPF record with current IPv4/IPv6 addresses
- Add AAAA update support to Technitium DNS updater CLI
- Pin mailserver MetalLB IP to 10.0.20.201 for stable pfSense NAT
- pfSense: HE_IPv6 interface, strict firewall (80,443,25,465,587,993 + ICMPv6),
  socat IPv6→IPv4 proxy, removed dangerous "Allow all DEBUG" rules
This commit is contained in:
Viktor Barzin 2026-03-23 02:22:00 +02:00
parent 813f523170
commit 644562454c
6 changed files with 63 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
stacks/mailserver/modules/mailserver/main.tf
View file

@ -465,7 +465,8 @@ resource "kubernetes_service" "mailserver" {
}
spec {
type = "LoadBalancer"
type = "LoadBalancer"
load_balancer_ip = "10.0.20.201"
# external_traffic_policy = "Cluster"
external_traffic_policy = "Local"
selector = {