ginnoir/homelabstack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(proxy): add share_gate for Discord-group external access
Deploy Caddyfile to valhalla / deploy (push) Failing after 4s
Details

Browse Source 
Capability-URL snippet: external users visit ?k=SHARE_KEY once, Caddy
sets a 30-day HttpOnly cookie and redirects to the clean path. Subsequent
visits check the cookie only. Internal IPs and tailnet pass through
unconditionally. Applied to roms.ginnoir.com and romhacks.ginnoir.com.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ginnoir
2026-06-24 01:02:06 -05:00
co-authored by Claude Sonnet 4.6
parent 8510b1403e
commit f477465a1d
2 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stacks/proxy/stack.env
+4
View File
@@ -2,3 +2,7 @@
# Cloudflare API token for Caddy's DNS-01 TLS challenge.
# Scoped token: Zone > DNS > Edit on the ginnoir.com zone only.
CF_API_TOKEN=cfut_ijIT9HDjXWKgd0dtnyLqxv8L3deB7hSDivSqquwp905a6c51
# Shared-link gate key — external users visit ?k=<value> once to get a 30-day cookie.
# Rotate: change value here, push, Portainer redeploys proxy stack, post new URL in Discord.
SHARE_KEY=8e5d9f1ca20a448b66ed171aea97d172