feat(caddy): expose Hermes webui and admin dashboard on internal-only vhosts
Both Hermes services get direct (unguarded) vhosts: each authenticates itself (webui password; dashboard basic_auth in /data/config.yaml), so no Anubis challenge and no Authentik proxy provider is required. Upstreams are the host LAN IP because Caddy itself sits on dankclaw_default, where the gateway address 10.89.1.1 has nothing serving 8787. Internal-only by DNS absence: hermes.franksdank.cloud already resolves via Pi-hole addn-hosts; hermesadmin is added in this same commit so the caddyfile/addn-hosts cross-check (test 178) stays green.
This commit is contained in:
1 parent
2e179b024d
commit
1e4daaa24a
2 files changed
+24
No files matched your search
@@ -38,6 +38,7 @@
|
||||
192.168.0.143 comfyui.franksdank.cloud
|
||||
192.168.0.143 ai.franksdank.cloud
|
||||
192.168.0.143 hermes.franksdank.cloud
|
||||
192.168.0.143 hermesadmin.franksdank.cloud
|
||||
192.168.0.143 gitea.franksdank.cloud
|
||||
192.168.0.143 grafana.franksdank.cloud
|
||||
192.168.0.143 prometheus.franksdank.cloud
|
||||
|
||||
Reference in new issue
Block a user