adacam/docs/research/bee-tunnel-state.md

Bee Tunnel — Current Known Good State

Last updated: 2026-03-11 09:30 PDT

bee-tunnel.service (correct as of 09:30)

[Unit]
Description=Reverse SSH tunnel to Lucy
After=network.target

[Service]
Type=simple
ExecStart=/usr/bin/ssh -i /data/ssh/bee_tunnel_key -o StrictHostKeyChecking=no -o ServerAliveInterval=30 -o ServerAliveCountMax=3 -N -R 2222:localhost:22 -L 19999:localhost:1340 root@192.168.0.5
Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target

• NO ExecStartPre (removed — route manipulation was causing problems)
• -R 2222:localhost:22 — tunnel Lucy:2222 → Bee:22
• -L 19999:localhost:1340 — Bee accesses Lucy's ADAMaps API locally

sshd

• sshd.socket: active, listening on [::]:22 (dual-stack, accepts IPv4+IPv6)
• sshd_config: has ListenAddress 0.0.0.0 appended (harmless)
• No other changes to sshd config

Routing (when at home on zerocool)

• No manual routes needed
• wlp1s0f0: AP interface, 192.168.0.10/24
• wlp1s0f1: home WiFi client, 192.168.0.155/24
• Traffic to Lucy (192.168.0.5) routes via wlp1s0f1 by default (kernel connected route)

If SIM is inserted again

• LTE will add a default route — this may break the tunnel again
• Fix: ip route del default via 192.168.0.1 dev wlp1s0f0 (NOT the subnet route)
• Long-term fix: add metric to LTE route in lte-init.py

Accessing Bee

• Via tunnel (when home): ssh -p 2222 root@localhost (from Lucy)
• Via AP (phone): ssh root@192.168.0.10 (no password)
• Via home LAN direct: DOES NOT WORK — sshd only on AP interface
• ss is NOT installed on the Bee