dank/serverAppConfigs
1
0 Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity

docs: log entry reflects full port scan of Proton endpoint

Browse Source
This commit is contained in:
Frank committed 2026-09-01 15:59:29 -07:00
1 parent 3094ffa746
commit f1171b99cc
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
serverAppConfigs-docs/log.md
+3 -3
View File
@@ -16,15 +16,15 @@ timestamp: 2026-09-14
hosting partner); Dankclaw's tunnel v6 `2a07:b944::2:2` sits in hosting partner); Dankclaw's tunnel v6 `2a07:b944::2:2` sits in
CH-PROTONVPN-20160719; observed exit IP `149.22.88.19` = CDNEXT-SEA-CG. CH-PROTONVPN-20160719; observed exit IP `149.22.88.19` = CDNEXT-SEA-CG.
The "custom WG server" is a ProtonVPN Seattle WireGuard server - there is The "custom WG server" is a ProtonVPN Seattle WireGuard server - there is
no peer-registration step on any box of ours (no SSH, only silent TLS no peer-registration step on any box of ours (full 65535-port scan: no
listeners on 443/4443/4444/8443). SSH anywhere, just silent TLS listeners - 443, 4443-4468, 5995, 7770,
8443 - Proton's protocol-stealth port map, no admin surface).
- Mac gate corrected: provision a **second** Proton WG config (dashboard, - Mac gate corrected: provision a **second** Proton WG config (dashboard,
named e.g. `frankbook`) - one config = one keypair; two hosts on named e.g. `frankbook`) - one config = one keypair; two hosts on
Dankclaw's config bounce the server-side endpoint and kill SearXNG. Values Dankclaw's config bounce the server-side endpoint and kill SearXNG. Values
paste straight into the gluetun `custom` env. Earlier prepared keypair on paste straight into the gluetun `custom` env. Earlier prepared keypair on
dankclaw (`~/frankbook-wg/`) retired to `~/.AGENTTRASH/` (Proton generates dankclaw (`~/frankbook-wg/`) retired to `~/.AGENTTRASH/` (Proton generates
the keypair per config; no BYO pubkey). the keypair per config; no BYO pubkey).
###
- [[FrankBook-Pro]] provisioning section rewritten. - [[FrankBook-Pro]] provisioning section rewritten.
## 2026-09-01 — Jellyfin authentication moved to Authentik LDAP ## 2026-09-01 — Jellyfin authentication moved to Authentik LDAP