DmitryandClaude Sonnet 5
203751d874
lint / yamllint + ansible-lint + syntax-check (push) Canceled after 0s
The TLS tunnel came up but no LAN traffic flowed: "OpenVPN for Android" does not install the config-local `route` statements from a route-based p2p setup, so nothing was directed into tun. Zero packets ever reached tun2 on ru-vps. Switch the instance to a real `server` (topology subnet, 10.80.0.0/29 pool) and hand the LAN routes to the client via `push "route ..."`. Pushed routes are installed by every OpenVPN client, mobile included. The client profile drops to a plain `client` config (pull), keeping peer-fingerprint auth and inline cert/key. Also: widen NAT/forward from /30 to /29 (server mode needs a pool) and drop the now-stale /30 ufw route + MASQUERADE left by the p2p version. Verified on ru-vps: "Initialization Sequence Completed", tun2 10.80.0.1/29, ufw shows only the /29 forward rule, make openvpn-phone idempotent. The regenerated ada-phone.ovpn must be re-imported on the phone. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KbuZrUoevfBgCpf5DCF4DG