kai/infra-docker-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Promote DC9 HAProxy front door to TCP 443

Browse Source
This commit is contained in:
Codex
2026-09-02 23:37:15 -07:00
parent 85df6114ed
commit 093b14d2be
3 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/bwh-us-dc9/frontdoor/README.md
+3 -3
View File
@@ -7,6 +7,6 @@ HAProxy inspects TCP SNI without terminating TLS:
- `dc9.kais.cloud` -> the existing Arcane Agent Caddy on `arcane_default`
- unmatched SNI -> the dedicated Caddy fallback serving `dc9.opfo.xyz`
The first deployment uses host TCP 8444. Moving it to TCP 443 requires a staged
handoff from the existing Arcane Agent Caddy so the Direct HTTPS management path
remains reachable throughout the change.
HAProxy publishes host TCP 443. The existing Arcane Agent Caddy remains attached
to `arcane_default` without a host TCP 443 binding and receives
`dc9.kais.cloud` traffic from HAProxy.