kevinveenbirkenbachandClaude Opus 5.5 a394d4bf6b fix(svc-net-wireguard): dial every endpoint at the IPv4 address it resolves to ...

The mesh is IPv4 only (60-byte header, IPv4 pools), yet wg.conf handed
wg the endpoint name, and wg dials the first getaddrinfo answer, an AAAA
on a dual-stack name. A host with broken IPv6 then never handshook
(alphaserver, 2026-11-01). Resolve every dialled endpoint with getent
ahostsv4 on the dialling host, render that literal, measure the path MTU
against it, and fail before rendering when a name has no IPv4 address.
Also set the tunnel MTU on a live interface, since wg syncconf drops it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-01 16:53:01 +01:00

..

__init__.py

…

_render_helpers.py

…

test_address.py

…

test_instances.py

feat(networks): name one instance per network an application is served on

2026-10-15 15:36:01 +02:00

test_mesh_declarations.py

feat(svc-net-wireguard): let a compose deployment name a hub with roaming spokes

2026-10-22 10:56:50 +02:00

test_mesh_peers.py

fix(svc-net-wireguard): dial every endpoint at the IPv4 address it resolves to

2026-11-01 16:53:01 +01:00

test_proxy.py

fix(web-app-nextcloud): trust the real reverse-proxy hop so Nextcloud sees client IPs

2026-10-29 17:07:57 +01:00

test_reachability.py

feat(networks): hand a role's non-canonical siblings over to its canonical URL

2026-10-16 12:37:16 +02:00

test_render_attachments.py

…

test_render_consumers.py

…

test_render_container_networks.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00

test_render_is_consumer.py

…

test_render_shared_net.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00

test_render.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00