Allow PS5 Payload Manager catalog DNS

This commit is contained in:
2026-10-07 21:27:27 +01:00
parent 5163d7a893
commit 7df4a40c78
5 changed files with 44 additions and 20 deletions
+13 -6
View File
@@ -33,14 +33,21 @@ The maintained LAN deployment runs on `net-utils01` from
| User Guide gateway | `192.168.20.30:80` and `:443` TCP | Redirect to the local Relapse page |
Configure the PS5 with primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`.
The DNS gateway resolves `manuals.playstation.net` locally, forwards only
`homebrew.page`, `github.com`, and `release-assets.githubusercontent.com` to its
configured upstream resolver, and returns NXDOMAIN for other names.
The DNS gateway resolves `manuals.playstation.net` locally and forwards only
`homebrew.page`, `itsplk.github.io`, `github.com`, and
`release-assets.githubusercontent.com` to its configured upstream resolver. These
names cover the homebrew store and the official PS5 Payload Manager catalog and
downloads; every other name receives NXDOMAIN.
The console needs LAN access to DNS UDP/TCP 53 and TCP 80, 443, and 8000 on
`192.168.20.30`. For the homebrew store it also needs WAN egress on TCP 443 to the
three allowlisted domains; no WAN ingress rule is required. The server needs DNS
egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by default).
`192.168.20.30`. For the homebrew store and Payload Manager it also needs WAN egress
on TCP 443 to the four allowlisted domains; no WAN ingress rule is required. The
server needs DNS egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by
default).
The Payload Manager supports arbitrary custom repository URLs. Those hosts are not
allowed automatically: review the repository JSON, payload URLs, checksums, and
redirect destinations before adding another exact hostname to `FORWARDED_DOMAINS`.
To deploy a reviewed commit: