| title |
tags |
| service-routing |
| infrastructure |
| networking |
|
Service Routing
Services are accessible via two DNS domains with different reachability.
DNS Domains
| Domain |
Proxy |
Reachable From |
*.ops.eblu.me |
Caddy on indri |
k8s pods, docker containers, tailnet clients |
*.tail8d86e.ts.net |
Tailscale MagicDNS |
Tailnet clients only |
Use *.ops.eblu.me for services that need pod-to-service communication.
Caddy Services (*.ops.eblu.me)
DNS points to indri's Tailscale IP (100.98.163.89). TLS via Let's Encrypt (ACME DNS-01 with Gandi).
Tailscale-Only Services
Port Map (Indri)
| Port |
Service |
Protocol |
Binding |
Notes |
| 443 |
Caddy |
HTTPS |
0.0.0.0 |
Reverse proxy |
| 2222 |
Caddy L4 |
TCP |
0.0.0.0 |
SSH proxy to Forgejo |
| 5432 |
Caddy L4 |
TCP |
0.0.0.0 |
PostgreSQL proxy |
| 2200 |
Forgejo SSH |
TCP |
localhost |
Built-in SSH server |
| 3001 |
Forgejo |
HTTP |
localhost |
Web UI |
| 5050 |
Zot |
HTTP |
localhost |
Registry API |
| 8096 |
Jellyfin |
HTTP |
localhost |
Media server |
| 44491 |
K8s API |
HTTPS |
0.0.0.0 |
Minikube API server |
Related