blumeops/docs/how-to
Erich Blume 0c6223fcf1 Fix Fly.io proxy: use TUN networking, preauthorize key, move healthz
Resolves multiple issues found during first deploy:
- Drop --tun=userspace-networking: Fly.io Firecracker VMs support TUN
  natively; userspace mode broke MagicDNS and Tailscale IP routing
- Add preauthorized=True to TailnetKey: required when tailnet has
  device approval enabled, otherwise containers hang on restart
- Move /healthz to default_server: Fly health checks send no Host
  header, so healthz must be on the catch-all server block
- Change region from sea (deprecated) to sjc
- Add iptables/ip6tables for TUN device support
- Add proxy_ssl_server_name for proper TLS SNI

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-08 02:16:19 -08:00
..
knowledgebase Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
add-ansible-role.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
deploy-k8s-service.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
expose-service-publicly.md Fix Fly.io proxy: use TUN networking, preauthorize key, move healthz 2026-02-08 02:16:19 -08:00
gandi-operations.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
how-to.md docs/expose-service-publicly pt2 - fly.io (#119) 2026-02-08 00:38:27 -08:00
restart-indri.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
troubleshooting.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
update-documentation.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
update-tailscale-acls.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00
use-pypi-proxy.md Update all docs titles to human-readable (#117) 2026-02-07 21:44:57 -08:00