mirror of
https://github.com/jmcorgan/fips.git
synced 2026-07-30 19:46:15 +00:00
Origami74
c8b7459fbc
Add a complete example running a strfry Nostr relay exclusively over the FIPS mesh using the sidecar pattern. Includes Docker Compose stack, network isolation via iptables, .fips DNS resolution, nak CLI, build script with cross-compilation support, and documentation. Also fix the package-openwrt.yml workflow path to match the openwrt → openwrt-ipk directory rename.
12 lines
495 B
Plaintext
12 lines
495 B
Plaintext
# FIPS mesh DNS — forward .fips queries to the local FIPS DNS responder.
|
|
#
|
|
# server= forward all .fips queries to 127.0.0.1:5354
|
|
# rebind-domain-ok= disable DNS-rebind protection for .fips; FIPS node
|
|
# addresses live in fd00::/8 (ULA), which dnsmasq blocks by
|
|
# default as a rebind-attack countermeasure.
|
|
#
|
|
# If your fips.yaml sets dns.port to something other than 5354, update the
|
|
# port number below to match.
|
|
server=/fips/127.0.0.1#5354
|
|
rebind-domain-ok=/fips/
|