Nik Afiq 8629a36278 fix: allow WireGuard road-warrior clients to reach DNS on minisforum ...

UFW allowed 53/udp+tcp from every other internal subnet but not from
10.10.0.0/24 (the WireGuard client subnet), so once the tunnel itself
was reachable, decrypted DNS queries still got dropped at minisforum's
own INPUT chain before reaching Technitium.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-26 20:45:09 +09:00

..

common

fix: allow WireGuard road-warrior clients to reach DNS on minisforum

2026-08-26 20:45:09 +09:00

docker

fix: Ansible cleanup -- merge dual config, pin collections, align K3s version, fix bugs

2026-07-23 18:15:12 +09:00

gitea-runner

Revert "feat: move Gitea traffic from gitea.nik4nao.com to gitea.home.arpa"

2026-08-19 00:22:27 +09:00

glances

feat(gitea): add backup CronJob with RBAC and NFS support

2026-03-12 21:56:32 +09:00

homeassistant

fix: Ansible cleanup -- merge dual config, pin collections, align K3s version, fix bugs

2026-07-23 18:15:12 +09:00

k3s-agent

feat: configure K3s DNS resolver and update firewall rules for new subnet

2026-08-23 14:07:49 +09:00

k3s-server

feat: configure K3s DNS resolver and update firewall rules for new subnet

2026-08-23 14:07:49 +09:00

monitoring/tasks

feat(gitea): add backup CronJob with RBAC and NFS support

2026-03-12 21:56:32 +09:00

nfs-server

feat: add routed UFW rules for pod traffic and open NFS/SMB on nik-debian

2026-08-23 15:00:45 +09:00

nvidia

fix: Ansible cleanup -- merge dual config, pin collections, align K3s version, fix bugs

2026-07-23 18:15:12 +09:00

ollama

fix: Ansible cleanup -- merge dual config, pin collections, align K3s version, fix bugs

2026-07-23 18:15:12 +09:00

pia-gateway

feat: add workaround for qBittorrent 5.2.0 stale lock issue with init container

2026-08-25 22:27:47 +09:00

vlan50-parent

feat: add vlan50-parent role for nik-debian's tagged VLAN 50 interface

2026-08-24 17:56:59 +09:00

watch-party

Revert "feat: move Gitea traffic from gitea.nik4nao.com to gitea.home.arpa"

2026-08-19 00:22:27 +09:00

wireguard

fix: route home LAN through mac WireGuard client, fix broken bool conditionals

2026-08-26 20:45:09 +09:00