From 3898a2b04dd06be3723a20721f34fcf3765baab9 Mon Sep 17 00:00:00 2001 From: "Roger (Cursor)" Date: Tue, 8 Sep 2026 20:30:23 +0000 Subject: [PATCH] docs(rentcharge): Cloudflare tunnel 1033 cause and hardening --- Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md | 43 +++++++++++++++++++ _sidebar.md | 1 + 2 files changed, 44 insertions(+) create mode 100644 Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md diff --git a/Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md b/Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md new file mode 100644 index 0000000..a86431b --- /dev/null +++ b/Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md @@ -0,0 +1,43 @@ +# Rentcharge Cloudflare Tunnel (BIG) + +**Atualizado:** 2026-09-08 +**Host:** BIG (wardrobe) ig-proxmox +**URL:** https://rentcharge.itecnologys.com/ + +## Causa do Error 1033 (recorrente) + +O DNS publico esta certo (Cloudflare). O 1033 aparece quando o connector do tunel itecnologys nao esta ligado. + +Dois tuneis no mesmo host: + +| Servico | Config | Metricas (unico) | Zona | +|---|---|---|---| +| cloudflared.service | config-mycloud.yml | 127.0.0.1:20241 | myvexx.com | +| cloudflared-itecnologys.service | config-itecnologys.yml | 127.0.0.1:20243 | rentcharge.itecnologys.com | + +Em 2026-09-08 o tunel itecnologys crash-loopava porque: + +1. Porta de metricas 20242 ja estava ocupada (conflito com o tunel mycloud). +2. DNS Tailscale 100.100.100.100 nao resolve cfd-features.argotunnel.com. + +A app no Traefik CT120 (10.10.10.120:80) estava OK o tempo todo. + +## Blindagem aplicada + +- Metricas fixas e distintas (20241 / 20243). +- Drop-in DNS BindReadOnlyPaths /etc/cloudflared/resolv.conf (1.1.1.1 + 8.8.8.8) nos dois units. +- StartLimitIntervalSec=0 no tunel itecnologys. +- Watchdog a cada 2 min: cloudflared-itecnologys-watchdog.timer + Reinicia o tunel so se o origin estiver 200 e o /ready local (127.0.0.1:20243/ready) falhar. + Nao reinicia o cloudflared mycloud (R630/boiler). +- Log: /var/log/rentcharge-watchdog.log +- README no host: /etc/cloudflared/README-TUNNELS.txt + +## Comandos + + systemctl is-active cloudflared cloudflared-itecnologys + tail -20 /var/log/rentcharge-watchdog.log + curl -sI -H Host: rentcharge.itecnologys.com http://10.10.10.120:80/ + curl -s http://127.0.0.1:20243/ready + +Nao alterar /etc/network/interfaces para este problema. diff --git a/_sidebar.md b/_sidebar.md index 311922a..6e72b80 100644 --- a/_sidebar.md +++ b/_sidebar.md @@ -11,6 +11,7 @@ - [CT130](ligbox-ops-platform/docs/vms/CT130.md) - [VM500 PROJETOS](ligbox-ops-platform/docs/vms/VM500.md) - [SPEC VM500 Rent Charge](Infra-Network/SPEC-VM500-RENTCHARGE.md) +- [Rentcharge Cloudflare Tunnel](Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md) - [Cursor Tapo Tuya MCP](Infra-Network/CURSOR_TAPO_TUYA_MCP.md) --- ## Casa Dublin (energia)