fix(infra): bind caddy to public eth0 IP only
Caddy was binding 0.0.0.0:443, which prevented tailscaled from claiming 100.87.53.10:443 for `tailscale serve --https=443`. Restricting Caddy to the public eth0 IP (187.124.159.82) keeps the public api.bytelyst.com / devops.bytelyst.com routing intact while freeing the Tailscale IP so the tailnet-only dashboard URL (https://srv1491630.tailf85608.ts.net) is reachable again. Generated with [Devin](https://cli.devin.ai/docs) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
parent
ec055f6948
commit
c0db29014b
@ -270,8 +270,10 @@ services:
|
|||||||
image: caddy:2-alpine
|
image: caddy:2-alpine
|
||||||
container_name: caddy
|
container_name: caddy
|
||||||
ports:
|
ports:
|
||||||
- '80:80'
|
# Bind to public eth0 IP only (not 0.0.0.0) so tailscaled can claim
|
||||||
- '443:443'
|
# 100.87.53.10:443 for `tailscale serve` on the tailnet.
|
||||||
|
- '187.124.159.82:80:80'
|
||||||
|
- '187.124.159.82:443:443'
|
||||||
volumes:
|
volumes:
|
||||||
- ../Caddyfile:/etc/caddy/Caddyfile:ro
|
- ../Caddyfile:/etc/caddy/Caddyfile:ro
|
||||||
- caddy-data:/data
|
- caddy-data:/data
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user