Jinemi/thermograph
4
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions 1

docs: record the two-name Centralis Caddy block on vps2 (#173)
All checks were successful
Sync infra to hosts / sync-beta (push) Has been skipped
Details
Sync infra to hosts / sync-prod (push) Has been skipped
Details
Sync infra to hosts / sync-centralis (push) Has been skipped
Details
Sync infra to hosts / sync-dev (push) Successful in 8s
Details
secrets-guard / encrypted (push) Successful in 11s
Details
shell-lint / shellcheck (push) Successful in 12s
Details

Browse source
This commit is contained in:
Emi Griffith 2026-08-02 18:42:14 +00:00
parent c82771183c
commit 694f07010f
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
infra/deploy/Caddyfile.vps2
View file

@ -4,7 +4,17 @@
# thermograph.org -> prod (loopback LB on 127.0.0.1:8137 / :8080)
# beta.thermograph.org -> beta (loopback LB on 127.0.0.1:8237 / :8180)
#
# and Centralis at mcp.jinemi.com, which is provisioned separately.
# and Centralis, which is provisioned separately and is NOT in this file — its
# block lives only in the live /etc/caddy/Caddyfile, commented there "added
# manually; fold into Terraform later". It serves two names off ONE site block,
# canonical first:
#
# mcp.jinemi.com, mcp.thermograph.org -> 127.0.0.1:8390
#
# The old name is kept as a served alias because Centralis derives its OAuth
# issuer from the name it is reached by (CENTRALIS_OAUTH_ISSUER), and the
# running container still has the old one until `main` is promoted. Both
# redirect URIs are registered on the Google client, so either name signs in.
#
# Each domain's A/AAAA record must already point here — Caddy provisions a
# Let's Encrypt cert on first request and auto-renews. Nothing else to do for