Полный продовый фикс fix22: DNS preflight, inet firewall, idempotent bootstrap, auth-semantics и redact-config

2026-05-08 09:41:57 +05:00
parent 06540087fd
commit 97e679f69f
15 changed files with 268 additions and 47 deletions
@@ -100,7 +100,7 @@ export async function applyFirewall(context: RuntimeContext): Promise<void> {

  const acmeChallengePort = context.config.acmeType === "tls" ? 443 : 80;
  const acmeRule = context.config.tlsMode === "acme"
-    ? `tcp dport ${acmeChallengePort} accept`
+    ? `meta nfproto ipv4 tcp dport ${acmeChallengePort} accept`
    : "# acme challenge port disabled";

  const rendered = renderTemplate(await readText(`${context.options.packageDir}/templates/nftables/hy2xs.nft.tpl`), {