Migrate k8s services to Caddy (*.ops.eblu.me) #59

Merged
eblume merged 1 commit from feature/migrate-k8s-services-to-caddy into main 2026-01-25 12:56:31 -08:00
Owner

Summary

  • Add Caddy reverse proxy routes for all k8s services (grafana, argocd, prometheus, loki, miniflux, devpi, kiwix, torrent, teslamate)
  • Add PostgreSQL via Caddy L4 TCP proxy on port 5432
  • Caddy proxies to existing Tailscale endpoints - traffic stays local on indri
  • Both *.ops.eblu.me and *.tail8d86e.ts.net URLs continue to work

Updated References

  • Alloy: prometheus/loki push endpoints → *.ops.eblu.me
  • Borgmatic: PostgreSQL backup host → pg.ops.eblu.me
  • Devpi: DEVPI_OUTSIDE_URL → pypi.ops.eblu.me
  • indri-services-check: health check URLs
  • CLAUDE.md: argocd login command

Deployment and Testing

  • Run mise run provision-indri -- --tags caddy to deploy new Caddy config
  • Test HTTP services: curl https://grafana.ops.eblu.me/api/health
  • Test PostgreSQL: pg_isready -h pg.ops.eblu.me -p 5432
  • Run mise run provision-indri -- --tags alloy to update Alloy endpoints
  • Run mise run provision-indri -- --tags borgmatic to update borgmatic
  • Sync devpi in ArgoCD: argocd app sync devpi
  • Re-login to ArgoCD: argocd login argocd.ops.eblu.me ...
  • Run mise run indri-services-check to verify all services

🤖 Generated with Claude Code

## Summary - Add Caddy reverse proxy routes for all k8s services (grafana, argocd, prometheus, loki, miniflux, devpi, kiwix, torrent, teslamate) - Add PostgreSQL via Caddy L4 TCP proxy on port 5432 - Caddy proxies to existing Tailscale endpoints - traffic stays local on indri - Both `*.ops.eblu.me` and `*.tail8d86e.ts.net` URLs continue to work ## Updated References - Alloy: prometheus/loki push endpoints → `*.ops.eblu.me` - Borgmatic: PostgreSQL backup host → `pg.ops.eblu.me` - Devpi: DEVPI_OUTSIDE_URL → `pypi.ops.eblu.me` - indri-services-check: health check URLs - CLAUDE.md: argocd login command ## Deployment and Testing - [ ] Run `mise run provision-indri -- --tags caddy` to deploy new Caddy config - [ ] Test HTTP services: `curl https://grafana.ops.eblu.me/api/health` - [ ] Test PostgreSQL: `pg_isready -h pg.ops.eblu.me -p 5432` - [ ] Run `mise run provision-indri -- --tags alloy` to update Alloy endpoints - [ ] Run `mise run provision-indri -- --tags borgmatic` to update borgmatic - [ ] Sync devpi in ArgoCD: `argocd app sync devpi` - [ ] Re-login to ArgoCD: `argocd login argocd.ops.eblu.me ...` - [ ] Run `mise run indri-services-check` to verify all services 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Add Caddy reverse proxy routes for all k8s services:
- grafana, argocd, prometheus, loki, miniflux, devpi, kiwix, torrent, teslamate
- PostgreSQL via Caddy L4 TCP proxy on port 5432

Caddy proxies to existing Tailscale endpoints (traffic stays local on indri).
Both *.ops.eblu.me and *.tail8d86e.ts.net URLs continue to work.

Updated references:
- Alloy: prometheus/loki push endpoints
- Borgmatic: PostgreSQL backup host
- Devpi: DEVPI_OUTSIDE_URL
- indri-services-check: health check URLs
- CLAUDE.md: argocd login command

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
eblume merged commit 66badfafd1 into main 2026-01-25 12:56:31 -08:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eblume/blumeops!59
No description provided.