Frank
23ad0ca317
`abs.` was a three-letter abbreviation of the container; the library it serves is /mnt/entropy/Audiobooks, and `audiobooks.` says what the door is. Renamed in one commit on purpose: the pihole seam fails the suite if a Caddyfile vhost has no addn-hosts record, so any split would leave a red commit, and the `abs` name was never deployed at the IdP with this fix, so nothing has to keep answering it — no alias, no redirect, no stale URI. Moves together: the Caddyfile site block, its matcher (@abs -> @audiobooks), the LAN record, ABS_EXTRA_BASES in authentik-audiobookshelf-sso.sh (that script REPLACES the provider's redirect-URI list, so the old origin's callback leaves the RP when it is next run), the homepage admin tile, the guard spec's GUARDED list and leak marker, and the three vault pages that name the door. authentik's provider row follows in the deploy window (external_host + name), which re-derives its redirect_uris through scripts/authentik-proxy-provider-defaults.sh; the Application row keeps its own name, "Audiobookshelf Guard" — it names the app, not the vhost.
50 lines
1.9 KiB
Plaintext
50 lines
1.9 KiB
Plaintext
# A records for the flat franksdank.name scheme (dnsmasq addn-hosts format:
|
|
# <IP> <name> [<name> ...]). Served by the Pi-hole quadlet (FTL is a
|
|
# dnsmasq fork): the quadlet mounts this file into /etc/pihole/hosts/ read-only.
|
|
#
|
|
# Caddy is consolidated on dankclaw (192.168.0.143): it fronts every service
|
|
# on both hosts, so every name resolves to that one IP. Keep in sync with the
|
|
# Caddyfile (tests/pihole.bats cross-checks this).
|
|
#
|
|
# 192.168.0.143 = dankclaw (runs the Caddy container + the AI/dev stack)
|
|
# 192.168.0.235 = dankserver (media stack; reached by Caddy via published
|
|
# LAN ports — no DNS records point here)
|
|
|
|
# --- Homepage (naked domain + www) + legacy names ---
|
|
192.168.0.143 franksdank.cloud
|
|
192.168.0.143 www.franksdank.cloud
|
|
192.168.0.143 dankclaw.franksdank.cloud
|
|
192.168.0.143 dankserver.franksdank.cloud
|
|
|
|
# --- Authentik (SSO / OIDC provider) ---
|
|
192.168.0.143 auth.franksdank.cloud
|
|
|
|
# --- Media services (dankserver, proxied) ---
|
|
192.168.0.143 plex.franksdank.cloud
|
|
192.168.0.143 plex.franksdank.casa
|
|
192.168.0.143 books.franksdank.cloud
|
|
192.168.0.143 romm.franksdank.cloud
|
|
192.168.0.143 files.franksdank.cloud
|
|
192.168.0.143 jelly.franksdank.cloud
|
|
192.168.0.143 audiobooks.franksdank.cloud
|
|
192.168.0.143 radarr.franksdank.cloud
|
|
192.168.0.143 lidarr.franksdank.cloud
|
|
192.168.0.143 readarr.franksdank.cloud
|
|
192.168.0.143 prowlarr.franksdank.cloud
|
|
192.168.0.143 qbittorrent.franksdank.cloud
|
|
|
|
# --- AI / search / dev services (dankclaw, local) ---
|
|
192.168.0.143 search.franksdank.cloud
|
|
192.168.0.143 comfyui.franksdank.cloud
|
|
192.168.0.143 ai.franksdank.cloud
|
|
192.168.0.143 hermes.franksdank.cloud
|
|
192.168.0.143 hermesadmin.franksdank.cloud
|
|
192.168.0.143 gitea.franksdank.cloud
|
|
192.168.0.143 grafana.franksdank.cloud
|
|
192.168.0.143 prometheus.franksdank.cloud
|
|
192.168.0.143 loki.franksdank.cloud
|
|
192.168.0.143 pihole.franksdank.cloud
|
|
192.168.0.143 seerr.franksdank.cloud
|
|
192.168.0.143 marreta.franksdank.cloud
|
|
192.168.0.143 notebook.franksdank.cloud
|