config_local_arch/etc/systemd/system, branch ib Device dependent config files for Arch Linux, managed by https://git.flylightning.xyz/fsh/tree/sh/cfg (git bare repo method) https://git.flylightning.xyz/config_local_arch/atom?h=ib 2025-08-30T07:43:18Z remove swgp 2025-08-30T07:43:18Z Xiao Pan xyz@flylightning.xyz 2025-08-30T07:43:18Z urn:sha1:344a329ae2b2fde2cee6b704fa8d3c9f3a2b55c7 ibb netns also run sshd, so when I vpn to ibb I can ssh to it 2025-08-29T06:30:36Z Xiao Pan xyz@flylightning.xyz 2025-08-29T06:30:36Z urn:sha1:4fb621933387c21f6f09676850e6f0ce0dd7cd3f swgp run in netns ns0 2025-03-29T10:27:54Z Xiao Pan xyz@flylightning.xyz 2025-03-29T10:27:54Z urn:sha1:8724fe74e611547c9eea83a3687ba90f0ae165cf Better ns0 network namespace configs 2024-12-29T10:17:35Z Xiao Pan xyz@flylightning.xyz 2024-12-29T10:12:50Z urn:sha1:a03e816d9d49c7f23be39f3cda19e02b37237832 Enable nft. Use different nft config for ns0. Host open emails port. ns0 open wireguard and qbt ports. ns0 configure wireguard. host not configure wiregurad, so also no need ip forwarding sysctl kernel parameters. ns0 use /etc/netns/ns0/nftables.conf that will bind mount to ns0. Host and ns0 both run dnsmasq for dns cache. ns0 dnsmasq I disable dbus because it will conficts with host dnsmasq dbus. Dnsmasq use dbus for config cahnge? I disable systemd-resolved and switch to dnsmasq because systemd-resolved use dbus for dns query? which is maybe easy for dns leak, e.g., when systemd-resolved is only running on host, ns0 with different /etc/resolv.conf still get dns from host open public ip when run resolvectl query, although drill does not leak. sye add enabled systemd units qbt and wg run in ns0 network namespace 2024-12-28T14:07:05Z Xiao Pan xyz@flylightning.xyz 2024-12-28T14:07:05Z urn:sha1:62e16c1bcd97d21896516874e2d8a3318348ed86 Merge branch 'ca' into ib 2024-12-25T10:07:16Z Xiao Pan xyz@flylightning.xyz 2024-12-25T10:07:16Z urn:sha1:94277ca5ac170f4650606bf2b4e8a5c4aa812c67 Combine ca into ia to become new ib VPS. feat: wg and swgp config, mainly for aa 2024-06-28T00:57:17Z Xiao Pan gky44px1999@gmail.com 2024-06-28T00:57:17Z urn:sha1:9c956cfe1ee447fc0968d88516e7c859a601b25a new ca no need save storage, paccache can delete less 2024-04-09T08:21:12Z Xiao Pan gky44px1999@gmail.com 2024-04-09T08:21:12Z urn:sha1:3ad044bd524482662af6d3200f32e8afeab6b293 swith to new ca server; wireguard no need 2024-04-09T08:10:31Z Xiao Pan gky44px1999@gmail.com 2024-04-09T08:10:31Z urn:sha1:1e20d2372ee99457c1efc609914015657b71f4ed new 2024-04-05T07:54:47Z Xiao Pan gky44px1999@gmail.com 2024-04-05T07:54:47Z urn:sha1:e6e7ab2f7029fc18c10e2a18d2e2fcc0c0440aa2