mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-11 17:17:54 +00:00
Origami74
c8b7459fbc
Add a complete example running a strfry Nostr relay exclusively over the FIPS mesh using the sidecar pattern. Includes Docker Compose stack, network isolation via iptables, .fips DNS resolution, nak CLI, build script with cross-compilation support, and documentation. Also fix the package-openwrt.yml workflow path to match the openwrt → openwrt-ipk directory rename.
13 lines
542 B
Plaintext
13 lines
542 B
Plaintext
# FIPS: bridge netfilter settings
|
|
#
|
|
# kmod-br-netfilter must be loaded for AF_PACKET sockets to receive frames
|
|
# on bridge member ports (e.g. eth1 when it is a member of br-lan).
|
|
# Without it, the bridge's rx_handler intercepts frames before they reach
|
|
# the packet socket layer.
|
|
#
|
|
# We load br_netfilter for the AF_PACKET visibility benefit but disable its
|
|
# IP/IPv6/ARP call hooks to avoid double-processing of routed traffic.
|
|
net.bridge.bridge-nf-call-iptables=0
|
|
net.bridge.bridge-nf-call-ip6tables=0
|
|
net.bridge.bridge-nf-call-arptables=0
|