From 8c543be367807f3bfe6c5cd31bb1adbeeca7b343 Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Tue, 10 Feb 2026 17:41:29 +0100
Subject: [PATCH] Bind Traefik entry points to IPv6 addresses

---
 nix-system-configs/modules/system/traefik.nix | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/nix-system-configs/modules/system/traefik.nix b/nix-system-configs/modules/system/traefik.nix
index ffe915e..f8718ef 100644
--- a/nix-system-configs/modules/system/traefik.nix
+++ b/nix-system-configs/modules/system/traefik.nix
@@ -48,7 +48,8 @@
       staticConfigOptions = {
         entryPoints = {
           web = {
-            address = ":80";
+            # Bind on IPv6 as well as IPv4 by using [::]:80
+            address = "[::]:80";
             asDefault = true;
             http.redirections.entrypoint = {
               to = "websecure";
@@ -56,7 +57,8 @@
             };
           };
           websecure = {
-            address = ":443";
+            # Bind on IPv6 as well as IPv4 by using [::]:443
+            address = "[::]:443";
             asDefault = true;
             http.tls = {
               domains = [
@@ -69,17 +71,19 @@
           };
           # Federation entrypoint: external TLS on 8448
           federation = {
-            address = ":8448";
+            # Bind on IPv6 as well as IPv4 by using [::]:8448
+            address = "[::]:8448";
           };
           # TeamSpeak entry points
           teamspeak-voice = {
-            address = ":9987/udp";
+            # UDP entrypoint bind to IPv6 as well
+            address = "[::]:9987/udp";
           };
           teamspeak-squery = {
-            address = ":10022/tcp";
+            address = "[::]:10022/tcp";
           };
           teamspeak-data = {
-            address = ":30033/tcp";
+            address = "[::]:30033/tcp";
           };
         };
         log = {