3 Commits

Include renames

Author	SHA1	Message	Date
vasyanskandClaude Opus 5.5	4fccfb9089	feat: mark proxy-originated errors and pin container DNS ... - handle_errors sets X-Proxy-Error (dial|upstream) and X-Proxy-Error-Detail so clients with several proxies can fail over when the upstream was never reached, instead of treating the proxy's 502 as the upstream's - explicit dns in compose: the container no longer inherits a host resolver that may disappear (systemd-resolved was switched off on the VM and every lookup failed until a restart) - strip X-Proxy-Token from Caddy logs (it was logged in clear text) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-27 19:05:04 +07:00
vasyanskandClaude Opus 5	d71001a2bf	refactor: switch nginx to Caddy with automatic Let's Encrypt ... Nginx required manually managed certs on port 8443; TLS was effectively unused. Caddy issues and renews certificates for DOMAIN on its own. - Caddyfile replaces nginx.conf + locations.conf; upstreams are one `import api <prefix> <host> <path-prefix>` line each - routes wrapped in `route {}` so guards run before handle_path - access control (IP allowlist, X-Proxy-Token) generated from env into matchers.caddy / guard.caddy by the entrypoint, as before - listeners: 443 (+udp, HTTP/3) and 80 for ACME on DOMAIN, plus the unchanged plain-HTTP 8082 -> 8080 path for existing clients - caddy_data volume added: losing it re-issues certs and burns LE limits - scripts/migrate-host-nginx.sh backs up and retires the host nginx - deploy.sh points at the real prod layout (/srv/elevenlabs, compose v1) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-20 13:35:49 +07:00
vasyansk	6dc514d519	init	2026-03-21 10:45:42 +07:00