docs: Add instructions for enabling IPv6 on docker_gwbridge for client IP preservation and link to it from the tutorial.

docs/federation/resolutions/in-progress/038.md

@@ -0,0 +1,29 @@
+---
+title: "Resolution 038: Merri-bek Tech joins Co-op Cloud Federation"
+---
+
+- Topic: Merri-bek Tech joins Coopcloud
+- Date: 2026-03-02
+- Deadline: 2026-03-16
+- Size: Large
+
+### Summary
+
+Merri-bek Tech is working towards neighbourhood-first, community controlled web services, building infrastructure using  the Co-op Cloud stack. Merri-bek Tech expects to pay membership dues.
+
+### Details
+
+Merri-bek Tech
+
+- currently depends on Traefik for neighbourhood-distributed nodes.
+- have developed and are maintaining Kiwix Co-op Cloud recipe for deploying Wikipedia across neighbourhood nodes
+- plans to use and contribute to maintenance, of additional components of Co-op Cloud stack as needed for subsequent phases of the project roadmap: neighbhourhood based email service, web hosting and decentralized social media.
+
+@jade:merri-bek.chat is an active member of the Co-op Cloud community.
+The group is based in Merri-bek, in the inner Northern suburbs of Naarm (Melbourne), Australia
+
+[Merri-bek Tech Inc.] is legally an incorporated association in Australia, which is a legal entity used for democratic clubs and societies. It is not intended to be a worker co-operative, it is a volunteer commons project, but it shares the mutuality goals of cooperatives. Full details are at [merri-bek.tech](https://merri-bek.tech).
+
+The project that Merri-bek Tech is running to promote Neighbourhood-First Software in Merri-bek and other regions, is detailed at [lores.tech](https://lores.tech).
+
+@ammaratef45 from RTM is honored to vouch

docs/operators/handbook.md

@@ -219,6 +219,37 @@ By convention, the main `app` service is wired up to the "global" traefik overla
 
 To deal with this, we make an additional "internal" network for each app which is namespaced to that app. So, if you deploy a Wordpress instance called `my_wordpress_blog` then there will be a network called `my_wordpress_blog_internal` created. This allows all the services in an app to speak to each other but not be reachable on the public internet.
 
+### IPv6 Client IP Detection in Docker Swarm
+
+With Traefik using host-mode networking, you may notice that preserving the real Client IP works fine for IPv4, but fails for IPv6. Instead of the actual remote IPv6 address, the application receives a local IPv4 address (typically from the `172.18.0.x` range).
+When a Docker Swarm is initialized, it automatically creates a default bridge network called `docker_gwbridge` to handle external communications for swarm containers. By default, this network does not have IPv6 enabled. 
+When an IPv6 connection arrives at a host-published port, Docker must translate this into an IPv4 connection to reach Traefik on the IPv4 only network. This effectively masks the original client's IPv6 address behind the gateway's internal IPv4 address on the `docker_gwbridge` network.
+
+**Enable IPv6 on `docker_gwbridge`**
+To preserve the real IPv6 Client IP, the `docker_gwbridge` network must be created with IPv6 enabled **before** initializing Swarm. This allows traffic to be routed correctly without loosing the original client's IPv6 address.
+```bash
+# 1. Enable IPv6 in the Docker daemon
+# Add "ipv6": true to /etc/docker/daemon.json
+mkdir -p /etc/docker
+if [ -s /etc/docker/daemon.json ]; then
+  contents="$(jq '.ipv6 = true' /etc/docker/daemon.json)" && echo -E "${contents}" > /etc/docker/daemon.json
+else
+  echo '{
+    "ipv6": true
+}' > /etc/docker/daemon.json
+fi
+# 2. Restart the Docker service to apply the daemon configuration
+systemctl restart docker
+# 3. Create the IPv6-enabled docker_gwbridge
+docker network create --ipv6 \
+  --opt com.docker.network.bridge.name=docker_gwbridge \
+  --opt com.docker.network.bridge.enable_ip_forwarding=true \
+  --opt com.docker.network.bridge.enable_ip_masquerade=true \
+  docker_gwbridge
+# 4. Initialize the swarm (it will adopt the existing docker_gwbridge)
+docker swarm init
+```
+
 ## Multiple apps on the same domain?
 
 At time of writing (Jan 2022), we think there is a limitation in our design which doesn't support multiple apps sharing the same domain (e.g. `example.com/app1/` & `example.com/app2/`). `abra` treats each domain as unique and as the single reference for a single app.

docs/operators/tutorial.md

@@ -27,7 +27,7 @@ Assuming you've got a running server, it's now time to configure it.
 
 Co-op Cloud has very few system requirements. You only need to worry about the system resource usage of your apps and the overhead of running containers with the docker runtime (often negligible. If you want to know more, see [this FAQ entry](/intro/faq/#isnt-running-everything-in-containers-inefficient)).
 
-To get started, you'll need to install Docker, add your user to the Docker group & setup swarm mode. Many hosting providers support [cloud-init](https://cloudinit.readthedocs.io/en/latest/index.html), which allows you to automate the steps in this section. If that applies to you, you can use [our cloud-init file](https://git.coopcloud.tech/toolshed/abra/raw/branch/main/scripts/cloud-init/cloud-init.yaml).
+To get started, you'll need to install Docker, add your user to the Docker group & setup swarm mode. Many hosting providers support [cloud-init](https://cloudinit.readthedocs.io/en/latest/index.html), which allows you to automate the steps in this section. If that applies to you, you can use [our cloud-init file](https://git.coopcloud.tech/toolshed/abra/raw/branch/main/scripts/cloud-init/cloud-init.yaml). If your server has a public IPv6 address, you'll need to enable IPv6 on `docker_gwbridge` as well. See [this handbook entry](/operators/handbook/#enable-ipv6-on-docker_gwbridge) for more information.
 
 Otherwise, here are the step required:
 

mkdocs.yml

@@ -138,6 +138,7 @@ nav:
               - federation/resolutions/index.md
               - federation/resolutions/in-progress/035.md
               - federation/resolutions/in-progress/037.md
+              - federation/resolutions/in-progress/038.md
       - "Minutes":
           - federation/minutes/index.md
           - "Recently":