V6 complete

2026-08-26 12:04:43 -05:00
parent c2ed98c16d
commit 2c6ef46f5f
5 changed files with 22 additions and 2 deletions
@@ -53,6 +53,12 @@ Validate tunnel container:
 docker compose --env-file .env.production -f docker-compose.production.yml logs cloudflared
 ```

+LXC/proxied-network note:
+
+- The `cloudflared` service is pinned to `--protocol http2` with explicit DNS resolvers (`1.1.1.1`, `1.0.0.1`) in `docker-compose.production.yml`.
+- This avoids environments where Docker's embedded resolver (`127.0.0.11`) cannot resolve `region*.v2.argotunnel.com`, which causes connector precheck failure and tunnel shutdown.
+- If tunnel status is still down, verify host/container egress for DNS and TCP 443 to `api.cloudflare.com` and `*.argotunnel.com`.
+
 ## 5. Security notes

 - Keep `postgres` and other internal-only services off public hostnames unless required.