From 19d36c2d337058f3ce074e208abbe5bbfdf912e2 Mon Sep 17 00:00:00 2001 From: Alexandre <44178713+alexbelgium@users.noreply.github.com> Date: Thu, 13 Aug 2026 08:10:23 +0200 Subject: [PATCH] fix(qbittorrent): allow ::/0 so WireGuard stops dropping IPv6 traffic (#2970) * fix(qbittorrent): allow ::/0 so WireGuard stops dropping IPv6 _wireguard_up() sets allowed_ip_types[0.0.0.0/0] when the config declares an IPv4 Address, but the IPv6 branch never sets ::/0. The peer therefore only accepts the tunnel's own /128, while _routing_add() installs a default IPv6 route into the interface, so every outbound IPv6 packet is routed into WireGuard and dropped. Regression from 7af8610a25; the pre-refactor code appended ::/0 in the same place. Co-Authored-By: Claude Opus 5 * Update config.yaml --------- Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5 --- qbittorrent/CHANGELOG.md | 4 ++++ qbittorrent/config.yaml | 2 +- qbittorrent/rootfs/usr/local/sbin/vpn | 1 + 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/qbittorrent/CHANGELOG.md b/qbittorrent/CHANGELOG.md index 8c4d42f611..d04689c489 100644 --- a/qbittorrent/CHANGELOG.md +++ b/qbittorrent/CHANGELOG.md @@ -1,4 +1,8 @@ +## 5.2.3.3 (2026-08-13) + +- Fix : with WireGuard, IPv6 traffic was silently dropped. When the WireGuard config declared an IPv6 `Address` (Mullvad, AirVPN and ProtonVPN all do), `vpn` added a default IPv6 route into the tunnel but never added `::/0` to the peer's `allowed-ips`, so WireGuard discarded every outgoing IPv6 packet. `::/0` is now allowed for IPv6 tunnels, mirroring the existing `0.0.0.0/0` handling for IPv4 + ## 5.2.3.2 (2026-08-12) - Fix : ingress could fail permanently with `nginx: [emerg] invalid port in ":"`. `30-nginx.sh` pastes `bashio::addon.ip_address` and `bashio::addon.ingress_port` straight into the nginx config; when the Supervisor answers before it is ready both come back empty and the config gets `listen : default_server;`. The add-on entrypoint now waits (up to 30s, tunable with `HA_SUPERVISOR_WAIT`) for the Supervisor to report the add-on's network details before any startup script runs diff --git a/qbittorrent/config.yaml b/qbittorrent/config.yaml index c2a587f209..4eee96936b 100644 --- a/qbittorrent/config.yaml +++ b/qbittorrent/config.yaml @@ -143,4 +143,4 @@ schema: slug: qbittorrent udev: true url: https://github.com/alexbelgium/hassio-addons -version: "5.2.3.2" +version: "5.2.3.3" diff --git a/qbittorrent/rootfs/usr/local/sbin/vpn b/qbittorrent/rootfs/usr/local/sbin/vpn index 91a1fa0e02..30613ce726 100755 --- a/qbittorrent/rootfs/usr/local/sbin/vpn +++ b/qbittorrent/rootfs/usr/local/sbin/vpn @@ -293,6 +293,7 @@ _wireguard_up() { elif [ "${result}" -eq 2 ]; then config["IPv6Enabled"]="true" local_ip_types["${local_ip}"]="ipv6" + allowed_ip_types["::/0"]="ipv6" _cmd "ip addr add ${local_ip} dev ${config["Interface"]}" || return 1 else bashio::log.warning "Ignoring invalid local IP address: ${local_ip}"