kai/infra-docker-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
85df6114edaa330667e0c1e08a9fd7584a4adf4c
infra-docker-configs/servers/bwh-us-dc9/frontdoor/README.md
T
Codex 787a1128c1 Add DC9 HAProxy TLS front door
2026-09-02 22:54:05 -07:00

564 B
Raw Blame History

DC9 TLS front door

HAProxy inspects TCP SNI without terminating TLS:

  • dc9-tls-e2f48b.opfo.xyz -> managed sing-box Trojan on host TCP 22591
  • sb-dd65a3.kais.cloud -> managed sing-box AnyTLS on host TCP 43824
  • dc9.kais.cloud -> the existing Arcane Agent Caddy on arcane_default
  • unmatched SNI -> the dedicated Caddy fallback serving dc9.opfo.xyz

The first deployment uses host TCP 8444. Moving it to TCP 443 requires a staged handoff from the existing Arcane Agent Caddy so the Direct HTTPS management path remains reachable throughout the change.

Reference in New Issue View Git Blame Copy Permalink