No description
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Claude 6c46a59abd
All checks were successful
Deploy / deploy (push) Successful in 6s
DDNS: also manage git.bobparsons.dev
Forgejo SSH has to reach the origin directly. Cloudflare's edge exposes no
public SSH listener - a tunnel can carry TCP, but only when `cloudflared
access` runs on the connecting machine to wrap the stream. Outside
collaborators won't install that, so git.bobparsons.dev moved back to a grey A
record and now carries the WAN IP.

Side benefit: pushes no longer traverse the proxy, so the 100MB request body
cap doesn't apply to git over HTTPS either.

Cost: the Forgejo web UI loses Cloudflare's WAF. Forgejo's own auth is the
remaining gate, as it was before the migration.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-08 12:04:37 -05:00
.forgejo/workflows correct path 2026-03-29 17:51:44 -05:00
docs Add cloudflared tunnel container 2026-08-08 10:43:26 -05:00
.env.example Switch ACME from HTTP-01 to DNS-01 via Cloudflare 2026-08-08 10:08:15 -05:00
.gitignore Ignore logs 2025-12-14 18:38:23 -06:00
CLAUDE.md DDNS: also manage git.bobparsons.dev 2026-08-08 12:04:37 -05:00
config.yml move to dynamic discovery 2025-07-12 12:24:04 -05:00
config.yml.backup move to dynamic discovery 2025-07-12 12:24:04 -05:00
cspell.json init project 2025-07-11 18:01:43 -05:00
docker-compose.yaml DDNS: also manage git.bobparsons.dev 2026-08-08 12:04:37 -05:00
logrotate.conf updated security 2025-12-14 18:28:07 -06:00
README.md setup for forgejo 2026-03-29 17:32:21 -05:00
traefik-hybrid-plan.md move to dynamic discovery 2025-07-12 12:24:04 -05:00
traefik.yml Remove cftest routers - DNS-01 verified in all four zones 2026-08-08 10:11:53 -05:00
traefik.yml.backup updated security 2025-12-14 18:28:07 -06:00

traefik

Traefik is deployed through the Forgejo workflow at .forgejo/workflows/deploy.yml.

Deployment configuration and required Infisical secrets are documented in docs/deployment.md.