From 0116cbb2c58871a4032c9cdb2044033751f12a95 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Wed, 1 Jul 2026 16:56:24 +0900
Subject: Revert fragmentation=no to restore iPhone VPN connectivity

fragmentation=no caused IP-level fragmentation (1808-byte packets) which is
blocked by mobile networks. Default IKE fragmentation (RFC 7383) works for
iOS/macOS with 2 fragments.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 vpn/swanctl.conf.tpl | 1 -
 1 file changed, 1 deletion(-)

diff --git a/vpn/swanctl.conf.tpl b/vpn/swanctl.conf.tpl
index 1fc84df..da988e0 100644
--- a/vpn/swanctl.conf.tpl
+++ b/vpn/swanctl.conf.tpl
@@ -1,7 +1,6 @@
 connections {
     ikev2-eap {
         version = 2
-        fragmentation = no
         # iOS/macOS/Android 互換の暗号スイート
         proposals = aes256gcm16-prfsha256-ecp256,aes256-sha256-ecp256,aes256gcm16-prfsha384-ecp384,aes256-sha256-modp2048,aes256-sha1-modp2048
 
-- 
cgit v1.2.3