Resolves multiple issues found during first deploy: - Drop --tun=userspace-networking: Fly.io Firecracker VMs support TUN natively; userspace mode broke MagicDNS and Tailscale IP routing - Add preauthorized=True to TailnetKey: required when tailnet has device approval enabled, otherwise containers hang on restart - Move /healthz to default_server: Fly health checks send no Host header, so healthz must be on the catch-all server block - Change region from sea (deprecated) to sjc - Add iptables/ip6tables for TUN device support - Add proxy_ssl_server_name for proper TLS SNI Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| knowledgebase | ||
| add-ansible-role.md | ||
| deploy-k8s-service.md | ||
| expose-service-publicly.md | ||
| gandi-operations.md | ||
| how-to.md | ||
| restart-indri.md | ||
| troubleshooting.md | ||
| update-documentation.md | ||
| update-tailscale-acls.md | ||
| use-pypi-proxy.md | ||