fix(infra): bind caddy to public eth0 IP only

Caddy was binding 0.0.0.0:443, which prevented tailscaled from claiming
100.87.53.10:443 for `tailscale serve --https=443`. Restricting Caddy to
the public eth0 IP (187.124.159.82) keeps the public api.bytelyst.com /
devops.bytelyst.com routing intact while freeing the Tailscale IP so the
tailnet-only dashboard URL (https://srv1491630.tailf85608.ts.net) is
reachable again.

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
Saravana Kumar 2026-05-30 16:37:09 +00:00
parent ec055f6948
commit c0db29014b

View File

@ -270,8 +270,10 @@ services:
image: caddy:2-alpine image: caddy:2-alpine
container_name: caddy container_name: caddy
ports: ports:
- '80:80' # Bind to public eth0 IP only (not 0.0.0.0) so tailscaled can claim
- '443:443' # 100.87.53.10:443 for `tailscale serve` on the tailnet.
- '187.124.159.82:80:80'
- '187.124.159.82:443:443'
volumes: volumes:
- ../Caddyfile:/etc/caddy/Caddyfile:ro - ../Caddyfile:/etc/caddy/Caddyfile:ro
- caddy-data:/data - caddy-data:/data