summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2026-07-09Fix IPv6 direct mode routing for LAN clientsAhmed Abdelhalim5-2/+2
- Remove static network_ipv6_gateway from LAN hosts so they pick up Pi's radvd RA (pref high) instead of FritzBox (pref low) - Add missing ip6tables FORWARD ACCEPT rule for new connections in direct mode (only ESTABLISHED was present, blocking new flows) - Flush ip6tables nat POSTROUTING table on clear instead of fragile per-rule -D deletion to prevent stale rule accumulation
2026-07-08Route IPv6 through WireGuard VPN via radvd and static gatewayAhmed Abdelhalim17-24/+68
Add radvd to gateway role to advertise Pi as high-preference IPv6 default router using the stable ULA prefix (fd1e:.../64). With FritzBox also sending RAs, devices end up with ECMP between Pi and FritzBox. To solve this, add network_ipv6_gateway (Pi's link-local) as a static route with metric 100 to all managed hosts — beats RA metric 425, ensuring all IPv6 default traffic goes through Pi. Fix IPv6 MASQUERADE in gateway-apply-rules: - Direct mode: add MASQUERADE on end0 (LAN devices use ULA source addresses not known to FritzBox, so Pi must NAT them) - FORWARD rules: restrict to RELATED,ESTABLISHED only — previously the broad ACCEPT rule passed un-NAT'd packets alongside masqueraded copies, causing duplicate SYNs, conntrack corruption, and RSTs - MASQUERADE/clear rules: match by interface not by source subnet (devices may use any source address, not just the ULA prefix) - VPN mode return traffic: explicitly restrict to wg+→end0 direction Add network_ipv6_gateway var (optional) to network role NM templates (ethernet, wifi, bridge) — injects a static IPv6 default route at metric 100 when set. Add rpi5 static route to FritzBox link-local so Pi keeps IPv6 after FritzBox RA is disabled. Force SSH to IPv4 for *.local hosts (AddressFamily inet) — prevents Ansible from hanging on mDNS returning multiple IPv6 addresses. Update gateway and pihole READMEs with two-step IPv6 setup process. Co-Authored-By: Claude.ai
2026-07-08Update gateway/ip configurations for the piAhmed Abdelhalim1-0/+0
2026-07-08Fix bridge network treated as new deviceAhmed Abdelhalim1-1/+1
2026-07-08Refactor network roleAhmed Abdelhalim9-56/+8
Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai
2026-07-08Implement a working ipv6 on gatewayAhmed Abdelhalim4-3/+58
2026-07-08Fix install proxmoxer using pipAhmed Abdelhalim3-7/+13
Using mise or python role broke on other machines so went with the simplest solution for now, it's safe to break the system packages for python as this is not used internally in other ways Also proxmoxer 2+ is needed to work with the proxmox module
2026-07-08Update pihole docsAhmed Abdelhalim1-7/+15
2026-07-08Revert 54ab1be commit change on ipv6Ahmed Abdelhalim2-2/+2
2026-07-08Revert 524d62e changes on gateway roleAhmed Abdelhalim4-73/+5
2026-07-07Add cgit role with testing of molecule serviceAhmed Abdelhalim11-0/+220
2026-07-07Add pve-lxc service provisioning using service.yml and containers groupAhmed Abdelhalim10-4/+41
2026-07-07Fix the proxmox_template linting issueAhmed Abdelhalim3-6/+9
2026-07-07Remove unneeded GSSAPIAuthenticationAhmed Abdelhalim1-1/+0
2026-07-07Add missing dependencies for the lintingAhmed Abdelhalim1-1/+3
2026-07-07Refactor mise not to use package managerAhmed Abdelhalim4-34/+22
2026-07-07Enable ipv6 on the rpiAhmed Abdelhalim4-12/+14
2026-07-06Fix starting the created containerAhmed Abdelhalim1-0/+1
2026-07-06Fix network setup on pveAhmed Abdelhalim9-16/+15
2026-07-06Fix pve network setupAhmed Abdelhalim16-125/+44
2026-07-06Use conventional storage nameAhmed Abdelhalim4-3/+3
2026-07-04Add pve-storage and pve-lxc to run containers on pveAhmed Abdelhalim1-0/+20
2026-07-04Add pve-lxc role to create containersAhmed Abdelhalim4-0/+111
2026-07-04Add notes about notest tagsAhmed Abdelhalim3-2/+10
2026-07-04Ignore failing tests in containersAhmed Abdelhalim1-0/+3
2026-07-03Add missing testing vars and rolesAhmed Abdelhalim1-0/+4
2026-07-03Refactor pve roles to create storage separatelyAhmed Abdelhalim10-27/+66
2026-07-03Refactor pve and add pve-network role to configure the pve networkAhmed Abdelhalim14-14/+170
2026-07-03Disable unstable ipv6 setup for nowAhmed Abdelhalim11-16/+5
2026-07-03Attempt to enable ipv6 on the network but doesn't work stable enoughAhmed Abdelhalim5-12/+76
2026-07-03Update ethtool to handle laptop lid suspend issuesAhmed Abdelhalim8-2/+46
When using WoL with laptops (ex Lenovo) closing the lid suspends the laptop and breaks WoL, this is to allow configuring the lid behavior
2026-07-03Add ethtool and configure interface for pveAhmed Abdelhalim3-0/+60
2026-07-03Use permanent MAC addresses for ehternet/LAN connectionsAhmed Abdelhalim1-0/+1
This prevents FRITZ!Box from messing up the setup when seeing a new mac address on the LAN connections (causing it to block the pi or not able to wake the pve)
2026-07-02Add ethtool testingAhmed Abdelhalim6-0/+6
2026-07-02Add role to install ethtool (Wake-on-LAN)Ahmed Abdelhalim6-0/+67
2026-07-01Add prometheus node exporter to pveAhmed Abdelhalim2-0/+1
2026-07-01Update the README for gateway and pihole setup with details about ipv6Ahmed Abdelhalim2-17/+67
2026-07-01Add proxmoxer dependency roleAhmed Abdelhalim4-0/+24
2026-07-01Allow router advertisement on gateway interfacesAhmed Abdelhalim1-0/+3
2026-06-30Fix ipv6 with examplesAhmed Abdelhalim10-0/+15
2026-06-30Update rpi dns upstreamsAhmed Abdelhalim1-0/+0
2026-06-30Refactor role includes to use more convenient approachAhmed Abdelhalim1-67/+56
2026-06-30Fix hyprland role and documentationAhmed Abdelhalim1-14/+19
2026-06-30Disable ipv6 by defaultsAhmed Abdelhalim13-17/+2
Since ipv6 seems to be causing a lot of issues with the new ISP
2026-06-30Update pve admin password in example and real configurationsAhmed Abdelhalim2-0/+3
2026-06-29Update configure play namesAhmed Abdelhalim1-3/+3
2026-06-29Move group_vars around and explicitly set group in molecule testingAhmed Abdelhalim11-77/+93
2026-06-27Add restic role w/testingAhmed Abdelhalim14-0/+50
2026-06-27Refactor garage role for better stability and defaultsAhmed Abdelhalim6-54/+85
2026-06-26Merge configuration tasks using loops and update defaultsAhmed Abdelhalim3-37/+20
generated by cgit v1.2.3 (git 2.25.1) at 2026-07-27 06:32:59 +0000