kai/infra-docker-configs

Files

T

History

Codex a922793499 Use TLS-ALPN for DC9 fallback certificate

2026-09-02 23:49:18 -07:00

..

Use TLS-ALPN for DC9 fallback certificate

2026-09-02 23:49:18 -07:00

Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00

Add guarded Arcane Caddy port handoff

2026-09-02 22:58:04 -07:00

.env.example

Promote DC9 HAProxy front door to TCP 443

2026-09-02 23:37:15 -07:00

compose.yaml

Promote DC9 HAProxy front door to TCP 443

2026-09-02 23:37:15 -07:00

README.md

Promote DC9 HAProxy front door to TCP 443

2026-09-02 23:37:15 -07:00

README.md

DC9 TLS front door

HAProxy inspects TCP SNI without terminating TLS:

dc9-tls-e2f48b.opfo.xyz -> managed sing-box Trojan on host TCP 22591
sb-dd65a3.kais.cloud -> managed sing-box AnyTLS on host TCP 43824
dc9.kais.cloud -> the existing Arcane Agent Caddy on arcane_default
unmatched SNI -> the dedicated Caddy fallback serving dc9.opfo.xyz

HAProxy publishes host TCP 443. The existing Arcane Agent Caddy remains attached to arcane_default without a host TCP 443 binding and receives dc9.kais.cloud traffic from HAProxy.