diff --git a/Yggdrasil.md b/Yggdrasil.md new file mode 100644 index 0000000..fad18e1 --- /dev/null +++ b/Yggdrasil.md @@ -0,0 +1,45 @@ +## Run using the subnet address + +> [!TIP] +> See also `http://[222:a8e4:50cd:55c:788e:b0a5:4e2f:a92c]/yggdrasil:subnet_setting` + +Get your subnet address for the current Yggdrasil instance: + +``` bash +sudo yggdrasilctl getself +``` +* copy `IPv6 subnet` value e.g. `300:xxxx:xxxx:xxxx::` + +Create address using free `0200::/7` range, e.g. `300:xxxx:xxxx:xxxx::1` + +Add new address into `yggdrasil.service`: + +``` /etc/systemd/system/yggdrasil.service +[Service] +ExecStartPost=/bin/sleep 5s +ExecStartPost=/bin/ip address add 300:xxxx:xxxx:xxxx::1/64 dev tun0 +``` +* to get current `systemd` service location, just run `systemctl status yggdrasil` +* apply the changes: + * `sudo systemctl daemon-reload` + * `sudo systemctl restart yggdrasil` +* check the new address is connected with `ifconfig` + +### Firewall + +By using `iptables` with `ufw`, add following permission for port `1900`: + +``` bash +sudo ufw allow from 0200::/7 to 300:xxxx:xxxx:xxxx::1 port 1900 proto tcp +``` +* check the rules was updated successfully: `ufw status` + +### Launch + +Run the server from `nexy` user: + +```bash +nexy --public /path/to/dir --bind [300:xxxx:xxxx:xxxx::1]:1900 +``` +* replace `/path/to/dir` with your files location +* open `nex://[300:xxxx:xxxx:xxxx::1]` in your browser