kongkxandClaude Opus 5
6379e8c147
Project preview instances (gig-platform, gig-app) publish no host ports; they join an external `edge` Docker network under instance-qualified aliases. - Caddy joins `edge` and loads per-project sites from sites/*.caddy. It is the LAN entry: split DNS → Caddy → instance, by hostname label. - New preview tunnel, `cloudflared-preview`, on `edge` only. It routes public instance hostnames straight to their aliases, so public previews do not depend on Caddy, and the connector cannot reach Caddy, the host or LAN services. The infra tunnel keeps fronting the host's own services via Caddy and has no route to instances. - sites/gig-platform.caddy and sites/gig-app.caddy mirror gig-platform's docs/deploy/caddy/. - The old host-port gig blocks move to sites/legacy-gig.caddy, to delete at gig-platform's main cutover. - Global client-IP trust for requests arriving through cloudflared. Validated with the custom Cloudflare-DNS build (`caddy validate`). Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01MTExEkPpPMV4gSdfHpztra
34 lines
1.0 KiB
Plaintext
34 lines
1.0 KiB
Plaintext
# The old single gig-platform preview stack and gig-app web, on host ports.
|
|
#
|
|
# DELETE THIS FILE when gig-platform's main instance is migrated
|
|
# (gig-platform docs/deploy/instances.md). The instance compose publishes no
|
|
# 8088 or 3101, so after cutover these upstreams no longer exist; their
|
|
# replacements are gig-platform.caddy and gig-app.caddy.
|
|
#
|
|
# Kept separate so the current preview keeps working until then, and cutover
|
|
# is one `rm` plus a reload.
|
|
|
|
gig-api.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:8088
|
|
}
|
|
|
|
# Replaced by $APP_URL/objects/<bucket> on each instance.
|
|
gig-static.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:8088
|
|
}
|
|
|
|
# Proxies straight to Studio's break-glass port, bypassing db-studio-gate.
|
|
# Replaced by studio.gig-platform.dev.kucial.com, which goes through the gate.
|
|
gig-db.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3100
|
|
}
|
|
|
|
# Replaced by gig-app.dev.kucial.com.
|
|
gig-web.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3101
|
|
}
|