ginnoirandClaude Sonnet 4.6
f477465a1d
Deploy Caddyfile to valhalla / deploy (push) Failing after 4s
Capability-URL snippet: external users visit ?k=SHARE_KEY once, Caddy sets a 30-day HttpOnly cookie and redirects to the clean path. Subsequent visits check the cookie only. Internal IPs and tailnet pass through unconditionally. Applied to roms.ginnoir.com and romhacks.ginnoir.com. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
9 lines
435 B
Bash
9 lines
435 B
Bash
# proxy stack secrets
|
|
# Cloudflare API token for Caddy's DNS-01 TLS challenge.
|
|
# Scoped token: Zone > DNS > Edit on the ginnoir.com zone only.
|
|
CF_API_TOKEN=cfut_ijIT9HDjXWKgd0dtnyLqxv8L3deB7hSDivSqquwp905a6c51
|
|
|
|
# Shared-link gate key — external users visit ?k=<value> once to get a 30-day cookie.
|
|
# Rotate: change value here, push, Portainer redeploys proxy stack, post new URL in Discord.
|
|
SHARE_KEY=8e5d9f1ca20a448b66ed171aea97d172
|