aynish/commoncomputing-nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

asusmini: remove public Caddy vhosts + drop 80/443 (edge moved to pve Caddy LXC) #3

Merged
aynish merged 1 commits from caddy-edge-strip-pl63 into main 2026-09-28 04:20:23 +00:00
Conversation 1 Commits 1 Files Changed 2
+8 -22
boris commented 2026-09-28 02:15:36 +00:00
Collaborator
Copy Link
Copy Source

Edge move executed + verified 2026-09-28: 205.250.24.44:80/443 now → pve Caddy LXC (192.168.1.11); all four hostnames return 200 with valid LE certs; PL63 public forwards (22/8765) removed.

This PR finishes the handoff on the box:

  • Remove services.caddy virtualHosts (nothing LAN-local needs PL63 TLS anymore; services keep binding local ports for the edge to reach)
  • Drop 80/443 from allowedTCPPorts (eth0 no longer serves them)

Note: 5555/5556/6555/3030 stays open per PR #2 (LAN edge access).

Edge move **executed + verified 2026-09-28**: 205.250.24.44:80/443 now → pve Caddy LXC (192.168.1.11); all four hostnames return 200 with valid LE certs; PL63 public forwards (22/8765) removed. This PR finishes the handoff on the box: - Remove `services.caddy` virtualHosts (nothing LAN-local needs PL63 TLS anymore; services keep binding local ports for the edge to reach) - Drop 80/443 from `allowedTCPPorts` (eth0 no longer serves them) Note: 5555/5556/6555/3030 stays open per PR #2 (LAN edge access).
boris added 2 commits 2026-09-28 02:15:36 +00:00
asusmini: open 5555/5556/6555/3030 via allowedTCPPorts (extraInputRules was nft-backend-only, no-op on iptables backend — PR #1 did not open the ports) 315d1316c3
asusmini: strip public Caddy vhosts + drop 80/443 — public edge moved to pve Caddy LXC (205.250.24.44 -> .1.11), verified live 2026-09-28 65494e9b67
aynish approved these changes 2026-09-28 04:20:04 +00:00
aynish merged commit 6172de2297 into main 2026-09-28 04:20:23 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
aynish
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
boris (Boris Mann) aynish (Anish Lakhwara)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: aynish/commoncomputing-nix#3