Both Hermes services get direct (unguarded) vhosts: each authenticates itself (webui password; dashboard basic_auth in /data/config.yaml), so no Anubis challenge and no Authentik proxy provider is required. Upstreams are the host LAN IP because Caddy itself sits on dankclaw_default, where the gateway address 10.89.1.1 has nothing serving 8787. Internal-only by DNS absence: hermes.franksdank.cloud already resolves via Pi-hole addn-hosts; hermesadmin is added in this same commit so the caddyfile/addn-hosts cross-check (test 178) stays green.
48 lines
1.9 KiB
Plaintext
48 lines
1.9 KiB
Plaintext
# A records for the flat franksdank.name scheme (dnsmasq addn-hosts format:
|
|
# <IP> <name> [<name> ...]). Served by the Pi-hole quadlet (FTL is a
|
|
# dnsmasq fork): the quadlet mounts this file into /etc/pihole/hosts/ read-only.
|
|
#
|
|
# Caddy is consolidated on dankclaw (192.168.0.143): it fronts every service
|
|
# on both hosts, so every name resolves to that one IP. Keep in sync with the
|
|
# Caddyfile (tests/pihole.bats cross-checks this).
|
|
#
|
|
# 192.168.0.143 = dankclaw (runs the Caddy container + the AI/dev stack)
|
|
# 192.168.0.235 = dankserver (media stack; reached by Caddy via published
|
|
# LAN ports — no DNS records point here)
|
|
|
|
# --- Homepage (naked domain + www) + legacy names ---
|
|
192.168.0.143 franksdank.cloud
|
|
192.168.0.143 www.franksdank.cloud
|
|
192.168.0.143 dankclaw.franksdank.cloud
|
|
192.168.0.143 dankserver.franksdank.cloud
|
|
|
|
# --- Authentik (SSO / OIDC provider) ---
|
|
192.168.0.143 auth.franksdank.cloud
|
|
|
|
# --- Media services (dankserver, proxied) ---
|
|
192.168.0.143 plex.franksdank.cloud
|
|
192.168.0.143 plex.franksdank.casa
|
|
192.168.0.143 books.franksdank.cloud
|
|
192.168.0.143 romm.franksdank.cloud
|
|
192.168.0.143 files.franksdank.cloud
|
|
192.168.0.143 jelly.franksdank.cloud
|
|
192.168.0.143 radarr.franksdank.cloud
|
|
192.168.0.143 sonarr.franksdank.cloud
|
|
192.168.0.143 lidarr.franksdank.cloud
|
|
192.168.0.143 readarr.franksdank.cloud
|
|
192.168.0.143 prowlarr.franksdank.cloud
|
|
192.168.0.143 qbittorrent.franksdank.cloud
|
|
|
|
# --- AI / search / dev services (dankclaw, local) ---
|
|
192.168.0.143 search.franksdank.cloud
|
|
192.168.0.143 comfyui.franksdank.cloud
|
|
192.168.0.143 ai.franksdank.cloud
|
|
192.168.0.143 hermes.franksdank.cloud
|
|
192.168.0.143 hermesadmin.franksdank.cloud
|
|
192.168.0.143 gitea.franksdank.cloud
|
|
192.168.0.143 grafana.franksdank.cloud
|
|
192.168.0.143 prometheus.franksdank.cloud
|
|
192.168.0.143 loki.franksdank.cloud
|
|
192.168.0.143 pihole.franksdank.cloud
|
|
192.168.0.143 seerr.franksdank.cloud
|