kai/infra-docker-configs

Files

T

History

Codex 85df6114ed Fix DC9 decoy Caddy response syntax

2026-09-02 23:05:42 -07:00

..

Fix DC9 decoy Caddy response syntax

2026-09-02 23:05:42 -07:00

Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00

Add guarded Arcane Caddy port handoff

2026-09-02 22:58:04 -07:00

.env.example

Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00

compose.yaml

Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00

README.md

Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00

README.md

DC9 TLS front door

HAProxy inspects TCP SNI without terminating TLS:

dc9-tls-e2f48b.opfo.xyz -> managed sing-box Trojan on host TCP 22591
sb-dd65a3.kais.cloud -> managed sing-box AnyTLS on host TCP 43824
dc9.kais.cloud -> the existing Arcane Agent Caddy on arcane_default
unmatched SNI -> the dedicated Caddy fallback serving dc9.opfo.xyz

The first deployment uses host TCP 8444. Moving it to TCP 443 requires a staged handoff from the existing Arcane Agent Caddy so the Direct HTTPS management path remains reachable throughout the change.