admin/bf-infra
1
0
Fork 0
Code Issues 21 Pull Requests Actions Packages Projects Releases Wiki Activity

TP34: 420.teilzeitladen.xyz korrigiert (war terpene.*) + eigener DNS-Token

Browse Source 
- caddy/Caddyfile: Hostname 420.teilzeitladen.xyz (nicht terpene.*); eigener
  per-site tls-Block mit CF_DNS_API_TOKEN_TEILZEITLADEN, damit der enge
  emsenhuber.net-ACME-Token unangetastet bleibt (Least-Privilege)
- nautobot/tp34-caddy-cf-seed.py: veraltete terpene.*-Referenz im Kommentar korrigiert

Deploy erst nach Hinterlegen des teilzeitladen.xyz-Tokens in /etc/caddy/caddy.env
(Zone:DNS:Edit nur teilzeitladen.xyz).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Christoph Emsenhuber
2026-09-08 13:30:30 +02:00
parent 384f356290
commit b200401c5a
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
caddy/Caddyfile
View File

@@ -39,7 +39,13 @@ n8n.emsenhuber.net {
reverse_proxy http://10.40.20.167:5678 reverse_proxy http://10.40.20.167:5678
} }
terpene.teilzeitladen.xyz { # Eigene Zone teilzeitladen.xyz → eigener, eng geschnittener DNS-Token
# (CF_DNS_API_TOKEN_TEILZEITLADEN in /etc/caddy/caddy.env, chmod 600, NICHT im Repo;
# Zone:DNS:Edit nur fuer teilzeitladen.xyz). Global-acme_dns bleibt emsenhuber.net.
420.teilzeitladen.xyz {
tls {
dns cloudflare {env.CF_DNS_API_TOKEN_TEILZEITLADEN}
}
reverse_proxy http://10.40.20.167:8890 reverse_proxy http://10.40.20.167:8890
} }

4
nautobot/tp34-caddy-cf-seed.py
View File

@@ -133,8 +133,8 @@ ROUTES = [
("haos", "home-assistant", "hass.emsenhuber.net", "public"), ("haos", "home-assistant", "hass.emsenhuber.net", "public"),
("n8n", "n8n-web", "n8n.emsenhuber.net", "public"), ("n8n", "n8n-web", "n8n.emsenhuber.net", "public"),
("gitea", "gitea-http", "gitea.emsenhuber.net", "public"), ("gitea", "gitea-http", "gitea.emsenhuber.net", "public"),
# terpene: kein ipam.Service in TP37 P2 → hier als Hinweis, wird separat geseedet # 420.teilzeitladen.xyz: kein ipam.Service in TP37 P2 → hier als Hinweis, wird separat geseedet
# ("macmini", "terpene-worker", "terpene.teilzeitladen.xyz", "public"), # ("macmini", "terpene-worker", "420.teilzeitladen.xyz", "public"),
# Intern # Intern
("nautobot", "nautobot-web", "nautobot.bf.emsenhuber.net", "internal"), ("nautobot", "nautobot-web", "nautobot.bf.emsenhuber.net", "internal"),
("docker", "portainer", "portainer.bf.emsenhuber.net", "https-backend"), ("docker", "portainer", "portainer.bf.emsenhuber.net", "https-backend"),