ligbox/obsidian-vault
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(rentcharge): Cloudflare tunnel 1033 cause and hardening

Browse source
This commit is contained in:
Roger (Cursor) 2026-09-08 20:30:23 +00:00
parent d23d4f805e
commit 3898a2b04d
2 changed files with 44 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

43
Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md Normal file
View file

@ -0,0 +1,43 @@
# Rentcharge Cloudflare Tunnel (BIG)
**Atualizado:** 2026-09-08
**Host:** BIG (wardrobe) ig-proxmox
**URL:** https://rentcharge.itecnologys.com/
## Causa do Error 1033 (recorrente)
O DNS publico esta certo (Cloudflare). O 1033 aparece quando o connector do tunel itecnologys nao esta ligado.
Dois tuneis no mesmo host:
| Servico | Config | Metricas (unico) | Zona |
|---|---|---|---|
| cloudflared.service | config-mycloud.yml | 127.0.0.1:20241 | myvexx.com |
| cloudflared-itecnologys.service | config-itecnologys.yml | 127.0.0.1:20243 | rentcharge.itecnologys.com |
Em 2026-09-08 o tunel itecnologys crash-loopava porque:
1. Porta de metricas 20242 ja estava ocupada (conflito com o tunel mycloud).
2. DNS Tailscale 100.100.100.100 nao resolve cfd-features.argotunnel.com.
A app no Traefik CT120 (10.10.10.120:80) estava OK o tempo todo.
## Blindagem aplicada
- Metricas fixas e distintas (20241 / 20243).
- Drop-in DNS BindReadOnlyPaths /etc/cloudflared/resolv.conf (1.1.1.1 + 8.8.8.8) nos dois units.
- StartLimitIntervalSec=0 no tunel itecnologys.
- Watchdog a cada 2 min: cloudflared-itecnologys-watchdog.timer
Reinicia o tunel so se o origin estiver 200 e o /ready local (127.0.0.1:20243/ready) falhar.
Nao reinicia o cloudflared mycloud (R630/boiler).
- Log: /var/log/rentcharge-watchdog.log
- README no host: /etc/cloudflared/README-TUNNELS.txt
## Comandos
systemctl is-active cloudflared cloudflared-itecnologys
tail -20 /var/log/rentcharge-watchdog.log
curl -sI -H Host: rentcharge.itecnologys.com http://10.10.10.120:80/
curl -s http://127.0.0.1:20243/ready
Nao alterar /etc/network/interfaces para este problema.

1
_sidebar.md
View file

@ -11,6 +11,7 @@
- [CT130](ligbox-ops-platform/docs/vms/CT130.md) - [CT130](ligbox-ops-platform/docs/vms/CT130.md)
- [VM500 PROJETOS](ligbox-ops-platform/docs/vms/VM500.md) - [VM500 PROJETOS](ligbox-ops-platform/docs/vms/VM500.md)
- [SPEC VM500 Rent Charge](Infra-Network/SPEC-VM500-RENTCHARGE.md) - [SPEC VM500 Rent Charge](Infra-Network/SPEC-VM500-RENTCHARGE.md)
- [Rentcharge Cloudflare Tunnel](Infra-Network/RENTCHARGE_CLOUDFLARE_TUNNEL.md)
- [Cursor Tapo Tuya MCP](Infra-Network/CURSOR_TAPO_TUYA_MCP.md) - [Cursor Tapo Tuya MCP](Infra-Network/CURSOR_TAPO_TUYA_MCP.md)
--- ---
## Casa Dublin (energia) ## Casa Dublin (energia)