Frank
aa473aeddb
PMS 1.43.x on :32400 accepts, reads, and silently closes every non-TLS connection from a non-loopback source (loopback exempt). The plain-HTTP reverse_proxy therefore got EOF and Caddy answered an empty-body 502. Both Plex vhosts now dial the upstream over TLS with insecure_skip_verify (PMS self-signed cert, pinned LAN hop only; client-facing Let's Encrypt TLS unchanged).
1.8 KiB
1.8 KiB
type, title, description, tags, timestamp
| type | title | description | tags | timestamp | |||
|---|---|---|---|---|---|---|---|
| reference | Bundle Change Log | Chronological record of meaningful changes to the serverAppConfigs knowledge base. |
|
2026-08-26 |
Bundle Change Log
2026-08-26
/dankclaw/Caddyfile— Both Plex vhosts now proxy to PMS over a TLS upstream (insecure_skip_verify); PMS drops plain-HTTP connections from non-loopback sources, which produced empty-body 502s./docs/Infrastructure/Caddy.md— Documented the Plex TLS-upstream requirement and the/web/vs/distinction./tests/caddyfile.bats— Added a test pinning the TLS upstream transport on both Plex vhosts./docs/Dankclaw/Gitea.md— Documented migration of Gitea web proxy ownership to canonical Caddy and retirement of the standalone proxy./docs/Dankclaw/Dankclaw Stack.md— Updated boot-persistence and Caddy deployment descriptions for the two-unit Gitea stack./docs/Architecture/Deployment Flow.md— Replaced the split-proxy safety description with the canonical Caddy ownership model./dankclaw/gitea/quadlet/gitea-caddy.container— Retired the standalone Gitea Caddy Quadlet; deployment stages any live copy into home trash./scripts/deploy-plan.py— Routes retirement of the legacy proxy to the canonical Caddy and removes it from the service inventory./scripts/deploy.shand/scripts/deploy-remote.sh— Removed standalone proxy dispatch and added idempotent retirement before canonical Caddy deployment./tests/caddyfile.bats,/tests/deployment_scoping.bats,/tests/deployment_flow.bats,/tests/frank_large_config.bats— Added migration coverage and corrected the existing ubatch harness assertion./docs/index.md— Bundle index remains the root navigation entry for the updated pages.