wa'DIch blog-Setup vIghunmeH IPv6 neH vIwiv, WireGuard vIlo'taHvIS, juH-De'wI'vam vIlo'mo' (IPv6-lan-mey lI' 'ej ngeD route64.orgDaq SuHevlaH). lIghlaHghach vIchoHmeH, IPv4-Proxy Hur vIchelta' (qatlho' @Larvitz).

ghu'vammo' SSL-Qas lumaS: A-Record 'ej AAAA-Record Proxy lIghmo', Let's Encrypt-Validierung De'wI'wIjDaq Qapbe'.

pab: „IPv6-Hack“

AAAA-Eintrag WireGuard-IP De'wI'wIjDaq vIghach.

  • Domain: blog.burningboard.org
  • A-Record (Proxy): 194.28.98.217
  • AAAA-Record (Server): 2a11:6c7:f05:a8::2 (WireGuard)

AAAA-Eintragvammo' Let's Encrypt IPv6 lo'taHvIS De'wI'wIj lIghlaH (AAAA-Record lumaS) 'ej SSL-Zertifikat nob. IPv4-Traffic Proxy peghmo' jIHvaD lI'ta'.

ghunghach Qav

reH QapmeH, Caddy-Server wIchoHnIS:

1. De'wI'wIjDaq (NixOS, blog.nix)

IP-mey lI' vIHevmeH, Proxy vIHar:

services.caddy.globalConfig = ''
  servers {
      trusted_proxies static 2a06:9801:1c:1000::10
  }
'';

2. Proxy HurDaq (Caddy)

Proxy HTTPS lo'meH, Hostname (SNI) lI'nIS:

reverse_proxy [https://[2a11:6c7:f05:a8::2]:443](https://[2a11:6c7:f05:a8::2]:443) {
    header_up Host {host}
    transport http {
        tls_server_name blog.burningboard.org
    }
}

DaH IPv4 'ej IPv6 lo'taHvIS blog vIghlaH, pegh 'ej juH-IPwIj peghtaH! 🚀