fix(qbittorrent): allow ::/0 so WireGuard stops dropping IPv6 traffic (#2970)

* fix(qbittorrent): allow ::/0 so WireGuard stops dropping IPv6

_wireguard_up() sets allowed_ip_types[0.0.0.0/0] when the config declares an IPv4 Address, but the IPv6 branch never sets ::/0. The peer therefore only accepts the tunnel's own /128, while _routing_add() installs a default IPv6 route into the interface, so every outbound IPv6 packet is routed into WireGuard and dropped.

Regression from 7af8610a25; the pre-refactor code appended ::/0 in the same place.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* Update config.yaml

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Alexandre
2026-08-13 08:10:23 +02:00
committed by GitHub
parent 57cbc726f6
commit 19d36c2d33
3 changed files with 6 additions and 1 deletions

View File

@@ -1,4 +1,8 @@
## 5.2.3.3 (2026-08-13)
- Fix : with WireGuard, IPv6 traffic was silently dropped. When the WireGuard config declared an IPv6 `Address` (Mullvad, AirVPN and ProtonVPN all do), `vpn` added a default IPv6 route into the tunnel but never added `::/0` to the peer's `allowed-ips`, so WireGuard discarded every outgoing IPv6 packet. `::/0` is now allowed for IPv6 tunnels, mirroring the existing `0.0.0.0/0` handling for IPv4
## 5.2.3.2 (2026-08-12)
- Fix : ingress could fail permanently with `nginx: [emerg] invalid port in ":"`. `30-nginx.sh` pastes `bashio::addon.ip_address` and `bashio::addon.ingress_port` straight into the nginx config; when the Supervisor answers before it is ready both come back empty and the config gets `listen : default_server;`. The add-on entrypoint now waits (up to 30s, tunable with `HA_SUPERVISOR_WAIT`) for the Supervisor to report the add-on's network details before any startup script runs

View File

@@ -143,4 +143,4 @@ schema:
slug: qbittorrent
udev: true
url: https://github.com/alexbelgium/hassio-addons
version: "5.2.3.2"
version: "5.2.3.3"

View File

@@ -293,6 +293,7 @@ _wireguard_up() {
elif [ "${result}" -eq 2 ]; then
config["IPv6Enabled"]="true"
local_ip_types["${local_ip}"]="ipv6"
allowed_ip_types["::/0"]="ipv6"
_cmd "ip addr add ${local_ip} dev ${config["Interface"]}" || return 1
else
bashio::log.warning "Ignoring invalid local IP address: ${local_ip}"