fix: split ambiguous AUTH_SECRET and remove dead Matrix routes

RESUME_AUTH_SECRET and FAMAPP_AUTH_SECRET now replace the bare AUTH_SECRET (previously defined 3x in .env, last-wins). Each is pinned to the value its container is already running, so re-applying recreated nothing. This fixes resume's app reading \\\, which was undefined and resolved to an empty string -- the next container recreate would have wiped all resume sessions. Caddyfile: removed matrix.ginnoir.com and the ginnoir.com apex .well-known/matrix block (no Synapse backend on :8008). Applied to valhalla: dc config resolves with no warnings, Caddy reloaded, dc up -d left every service up-to-date.
This commit is contained in:
ginnoir
2026-06-02 22:33:59 -05:00
parent 56d834ede9
commit e841334316
3 changed files with 7 additions and 22 deletions
-15
View File
@@ -194,21 +194,6 @@ minio.ginnoir.com {
reverse_proxy resume-minio:9001
}
# =============================================================
# MATRIX — public
# =============================================================
ginnoir.com {
header /.well-known/matrix/* Content-Type application/json
header /.well-known/matrix/* Access-Control-Allow-Origin *
respond /.well-known/matrix/server `{"m.server": "matrix.ginnoir.com:443"}`
respond /.well-known/matrix/client `{"m.homeserver":{"base_url":"https://matrix.ginnoir.com"},"m.identity_server":{"base_url":"https://identity.ginnoir.com"}}`
}
matrix.ginnoir.com {
reverse_proxy /_matrix/* localhost:8008
reverse_proxy /_synapse/client/* localhost:8008
}
# =============================================================
# FAMAPP & AUTH — public
# =============================================================