fix(deploy): the home end dials the instance's server by its address (ADR 0032, D11)
All checks were successful
CI / check (push) Successful in 41m12s
CI / deploy (push) Successful in 56s

A tunnel that fails to come up takes Jellyfin's internet with it, as
linuxserver/wireguard's client mode deletes the default route. Named by
learn.halkyon.eu, the endpoint needed DNS to come up, which the home end
starting or waking hasn't always got yet; by its address the tunnel comes
up whatever the network does. Closes ADR 0032's open point.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-31 15:10:46 +01:00
commit 82fa7aec1b
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64

View file

@ -8,7 +8,11 @@ PrivateKey = <the home end's private key>
[Peer]
PublicKey = <the instance's public key>
Endpoint = learn.halkyon.eu:51820
# learn.halkyon.eu's server by its IPv4 address, not its name (ADR 0032, D11): a name
# needs DNS to come up, which a machine starting or waking hasn't always got yet, and a
# tunnel that fails to come up takes Jellyfin's internet with it. A new address of the
# server's goes here too.
Endpoint = 89.58.53.154:51820
# The instance's end alone, through which Caddy's requests come (masqueraded by Docker
# on the instance's server): nothing else of the internet goes through the tunnel.
AllowedIPs = 10.61.96.1/32