ginnoirandClaude Opus 5
cc960eb3eb
Deploy Caddyfile to valhalla / deploy (push) Successful in 44s
files.ginnoir.com imported internal_only, which 403s every non-LAN/tailnet client — including anyone opening a public share link. Replace the blanket import with an inline @blocked matcher that keeps the same IP gate but exempts Nextcloud's public-share surface: /s/*, /public.php*, the files_sharing app, and the static assets the share page loads. Everything else on the host (file browser, /settings, /remote.php/dav) still 403s externally. The nextcloud.ginnoir.com alias is unchanged and stays fully internal-only. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>