docs: IPv6 paragraph describes the link, not a VPN client #302

Merged

mysticalsoap merged 1 commit from docs/ipv6-paragraph into trunk

2026-09-21 00:23:32 -04:00

mysticalsoap commented

2026-09-21 00:04:40 -04:00

Owner

Problem

Public-Exposure.md's IPv6 paragraph credits a ProtonVPN desktop client with blackholing IPv6 on the host. That client no longer exists; the VPN is gluetun in the media stack and only its containers use it. The stated reason the open ip6tables DOCKER-USER chain is safe was false.

Fix

State the actual condition: the ISP link provides no global IPv6 address and no default route, so docker-proxy's [::] listeners are unreachable from outside, and name the check that would signal that changing.

Verification

On the host: ip -6 addr show scope global prints nothing, ip -6 route show default prints nothing, ip -brief link shows no VPN or leak interface, disable_ipv6 is 0. ss -6 -ltn shows docker-proxy on [::]:80, [::]:443, [::]:8443, [::]:53, [::]:853.

## Problem Public-Exposure.md's IPv6 paragraph credits a ProtonVPN desktop client with blackholing IPv6 on the host. That client no longer exists; the VPN is gluetun in the media stack and only its containers use it. The stated reason the open `ip6tables` `DOCKER-USER` chain is safe was false. ## Fix State the actual condition: the ISP link provides no global IPv6 address and no default route, so docker-proxy's `[::]` listeners are unreachable from outside, and name the check that would signal that changing. ## Verification On the host: `ip -6 addr show scope global` prints nothing, `ip -6 route show default` prints nothing, `ip -brief link` shows no VPN or leak interface, `disable_ipv6` is 0. `ss -6 -ltn` shows docker-proxy on `[::]:80`, `[::]:443`, `[::]:8443`, `[::]:53`, `[::]:853`.

mysticalsoap added the

docs

label

2026-09-21 00:04:40 -04:00

mysticalsoap added 1 commit

2026-09-21 00:04:40 -04:00

docs: IPv6 paragraph describes the link, not a VPN client

validate / validate (pull_request) Successful in 24s

Details

3b95abec85

The ProtonVPN desktop client is gone; the VPN is gluetun inside the
media stack and only its own containers use it. What keeps the open
ip6tables chain moot today is the ISP link carrying no IPv6.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

mysticalsoap merged commit 6d6f704763 into trunk

2026-09-21 00:23:32 -04:00

mysticalsoap deleted branch docs/ipv6-paragraph

2026-09-21 00:23:32 -04:00

mysticalsoap referenced this pull request from a commit

2026-09-21 00:23:33 -04:00

Merge pull request 'docs: IPv6 paragraph describes the link, not a VPN client' (#302) from docs/ipv6-paragraph into trunk