Krzysztof kuhy Rudnicki 1ea94e142c lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window ... Gateway mode routes LAN devices through the PC: forced DNS, DoH/DoT dropped. The work laptop still bypassed it through Cloudflare WARP, so the WARP ingress is dropped too. warp_window.sh opens it for the LAN only Mon/Fri 09:00-15:30 (nft set with a timeout to 15:30), asked for over a forced-command key by warp_home.sh, which keeps WARP off at home otherwise because WARP fails closed. Also: dnsmasq upstreams, AAAA filtering, DoH canary, and extracted_repo_dir resolving ~/src first (the nightly blocklist refresh had failed since 2026-09-11). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019C8pdLR4MePsLocE1pWz7F		2026-10-25 09:52:40 +01:00
..
tests	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
aw_autostart.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
aw_install.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
aw_service.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
dns_dhcp.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
dns_firewall.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
dns_gateway.sh	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
dns_units.sh	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
dot_resolver_install.sh	refactor(dot-resolver): install the tracked sync-dot-cert.sh instead of generating it	2026-10-11 19:32:54 +02:00
dwm_config.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
gitea_network.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
kcd2_autorebuild.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
kcd2_expose.sh	Static-site Caddies: shared AgentReady site block, serve redeploy, verify	2026-10-22 21:23:59 +02:00
kcd2_serve.sh	Static-site Caddies: shared AgentReady site block, serve redeploy, verify	2026-10-22 21:23:59 +02:00
local_llm_model.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
mobile_service.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_discover.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_flash.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_image.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_packages.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_php.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_remote_flash.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_remote.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
nc_services.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
pi_flash_exec.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
pi_flash_image.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
pi_flash_remote.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_ca.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_deps.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_fixes.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_install.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_ssl_remote.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_ssl.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
rpi_nc_system.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_expose.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_limiter.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_settings.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_stack.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_start.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
searxng_status.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
static_site_caddy.sh	Static-site Caddies: shared AgentReady site block, serve redeploy, verify	2026-10-22 21:23:59 +02:00
syncyomi_expose.sh	Run SyncYomi from the local fork build and stop clobbering the Caddy edge	2026-08-28 14:44:40 +02:00
syncyomi_stack.sh	Run SyncYomi from the local fork build and stop clobbering the Caddy edge	2026-08-28 14:44:40 +02:00
unreal_mcp_repo.sh	linux_configuration: track ~/.local/bin wrapper scripts in repo, symlink instead of generating	2026-10-11 18:49:56 +02:00
website_admin.sh	Run the website's post editor as a loopback unit, no Caddy route	2026-08-29 17:50:03 +02:00
website_build.sh	Static-site Caddies: shared AgentReady site block, serve redeploy, verify	2026-10-22 21:23:59 +02:00
wg_firewall.sh	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
wg_gateway.sh	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
wg_keys.sh	Dissolve linux_configuration/scripts/ and single_use/	2026-08-23 18:53:30 +02:00
wg_sshd.sh	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
wg_verify_units.sh	feat: the nftables drift check now runs itself at boot	2026-08-30 15:49:12 +02:00