| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 4 days | Disable ipv6 completely and remove related code | Ahmed Abdelhalim | 1 | -8/+0 | |
| Co-Authored-By: Claude.ai | |||||
| 13 days | Configure ipv6/prefer ipv4 switches for network (and all hosts) | Ahmed Abdelhalim | 1 | -4/+4 | |
| 2026-07-08 | Route IPv6 through WireGuard VPN via radvd and static gateway | Ahmed Abdelhalim | 1 | -0/+3 | |
| Add radvd to gateway role to advertise Pi as high-preference IPv6 default router using the stable ULA prefix (fd1e:.../64). With FritzBox also sending RAs, devices end up with ECMP between Pi and FritzBox. To solve this, add network_ipv6_gateway (Pi's link-local) as a static route with metric 100 to all managed hosts — beats RA metric 425, ensuring all IPv6 default traffic goes through Pi. Fix IPv6 MASQUERADE in gateway-apply-rules: - Direct mode: add MASQUERADE on end0 (LAN devices use ULA source addresses not known to FritzBox, so Pi must NAT them) - FORWARD rules: restrict to RELATED,ESTABLISHED only — previously the broad ACCEPT rule passed un-NAT'd packets alongside masqueraded copies, causing duplicate SYNs, conntrack corruption, and RSTs - MASQUERADE/clear rules: match by interface not by source subnet (devices may use any source address, not just the ULA prefix) - VPN mode return traffic: explicitly restrict to wg+→end0 direction Add network_ipv6_gateway var (optional) to network role NM templates (ethernet, wifi, bridge) — injects a static IPv6 default route at metric 100 when set. Add rpi5 static route to FritzBox link-local so Pi keeps IPv6 after FritzBox RA is disabled. Force SSH to IPv4 for *.local hosts (AddressFamily inet) — prevents Ansible from hanging on mDNS returning multiple IPv6 addresses. Update gateway and pihole READMEs with two-step IPv6 setup process. Co-Authored-By: Claude.ai | |||||
| 2026-07-08 | Refactor network role | Ahmed Abdelhalim | 1 | -7/+0 | |
| Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai | |||||
| 2026-07-08 | Revert 54ab1be commit change on ipv6 | Ahmed Abdelhalim | 1 | -1/+1 | |
| 2026-07-06 | Fix network setup on pve | Ahmed Abdelhalim | 1 | -5/+7 | |
| 2026-07-06 | Fix pve network setup | Ahmed Abdelhalim | 1 | -2/+10 | |
| 2026-07-03 | Use permanent MAC addresses for ehternet/LAN connections | Ahmed Abdelhalim | 1 | -0/+1 | |
| This prevents FRITZ!Box from messing up the setup when seeing a new mac address on the LAN connections (causing it to block the pi or not able to wake the pve) | |||||
| 2026-06-30 | Disable ipv6 by defaults | Ahmed Abdelhalim | 1 | -1/+1 | |
| Since ipv6 seems to be causing a lot of issues with the new ISP | |||||
| 2025-09-02 | Fix pihole and network manger DNS when VPN isn't active | Ahmed Abdelhalim | 1 | -0/+4 | |
| 2025-09-01 | Fix networking issues when VPN isn't active | Ahmed Abdelhalim | 1 | -1/+3 | |
| 2025-08-31 | Allow network role to configure ipv6 | Ahmed Abdelhalim | 1 | -0/+6 | |
| 2025-08-11 | Add network ipv4 configurations | Ahmed Abdelhalim | 1 | -1/+6 | |
| 2025-08-11 | Add network role | Ahmed Abdelhalim | 1 | -0/+16 | |
 |
index : ansible-distro-configure.git | |
| Ansible Roles to configure different (linux) distros |
| summaryrefslogtreecommitdiffstats |