Use ony ipV6, deactivate ipv4

Discuss

I went through various forum discussion but didn’t find out this question written this way. Often it is even more the opposite : how to get rid of ipv6 :wink:

I just want the next generation system, one that does not rely on ipv4.
This would really be a game changer since it is absolutely not straightforward to deploy multiple yunohost behind same home network Deux yunohost derrière une seule box? .

I can afford to have a non working mail, main focus are web applications so goal is having a letsencrypt certificate for my domains.

I for sure will try and share my findings, but some of you tried to get a ipv6 only yunohost ?

To my knowmedge it’s not possible atm because we eely on Github (for now) to install/update apps and Github hasn’t an ipv6 yet

There is this issue you can follow: IPv6-only support · Issue #229 · YunoHost/issues · GitHub

1 Like

Thanks for that answer.

So i might broaden my request with public Ipv6 only, while keeping an ipv4 address handled for connecting outside only.

My current test with trying to get a letencrypt certificate is not successful.

I did set DNS ‘Ipv6 Only’ in Tools/Yunhost parameters/Other/network and letsencrypt did go a little farther, but did fail finaly.

So i currently get only self signed certificate created at first setup.

Could it be caused by a firewall rule on the router ? Have 2 ynh instances working (12&13) with this setup.

Yes you are right.

It is caused by sosh ipbox firewall rule. I discover i have to create a dedicated rule for this device while a generic rule already exists. Something clumsy, i will have to dig further in this sosh/orange box setups.

It should be something as “security levels” > custom > custom ipv6 firewall rules.

There is a rule for HTTPS without any device , this rule allows https ipv6 traffic to flow to this yunohost.

There is a rule for HTTP without any device, and this rule does not allow traffic to flow to this yunhost device, but does work for the other yunohost.

So i had to add a specific rule HTTP for my device. this is working. But why the generic one not working … is another question.

I have specific rules for each ipv6 device.