---

dministrator@astra-77777:~$ getent hosts prime.it-enigma-ufa.local 
192.168.67.120  prime.it-enigma-ufa.local
administrator@astra-77777:~$ getent hosts vpn.it-enigma-ufa.local 
192.168.67.120  vpn.it-enigma-ufa.local
administrator@astra-77777:~$ cat /etc/resolv.conf 
# This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8).
# Do not edit.
#
# This file might be symlinked as /etc/resolv.conf. If you're looking at
# /etc/resolv.conf and seeing this text, you have followed the symlink.
#
# This is a dynamic resolv.conf file for connecting local clients to the
# internal DNS stub resolver of systemd-resolved. This file lists all
# configured search domains.
#
# Run "resolvectl status" to see details about the uplink DNS servers
# currently in use.
#
# Third party programs should typically not access this file directly, but only
# through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a
# different way, replace this symlink by a static file or a different symlink.
#
# See man:systemd-resolved.service(8) for details about the supported modes of
# operation for /etc/resolv.conf.

nameserver 127.0.0.53
options edns0 trust-ad
search .
administrator@astra-77777:~$ curl -k -I https://prime.it-enigma-ufa.local/
HTTP/2 200 
server: nginx
date: Wed, 23 Sep 2026 11:05:41 GMT
content-type: text/html
content-length: 69844
last-modified: Fri, 10 Jul 2026 04:14:13 GMT
etag: "6a507195-110d4"
expires: Wed, 23 Sep 2026 11:05:41 GMT
cache-control: max-age=0
expect-ct: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self';
accept-ranges: bytes
x-xss-protection: 1; mode=block

administrator@astra-77777:~$ curl -k -I htpps://192.168.67.120/
curl: (1) Protocol "htpps" not supported or disabled in libcurl
administrator@astra-77777:~$ resolvectl status 
Global
       Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: stub

Link 2 (ens32)
    Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
         Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 192.168.67.3
       DNS Servers: 192.168.67.3 192.168.68.3

Link 4 (docker0)
Current Scopes: none
     Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

Link 7 (br-a6c6ed8b5b7d)
Current Scopes: LLMNR/IPv4 LLMNR/IPv6
     Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

Link 9 (veth9f60b8c)
Current Scopes: LLMNR/IPv6
     Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

Link 11 (veth9bc112c)
Current Scopes: LLMNR/IPv6
     Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

Link 13 (veth3891831)
Current Scopes: LLMNR/IPv6
     Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported