Erich Blume
0c6223fcf1
Resolves multiple issues found during first deploy: - Drop --tun=userspace-networking: Fly.io Firecracker VMs support TUN natively; userspace mode broke MagicDNS and Tailscale IP routing - Add preauthorized=True to TailnetKey: required when tailnet has device approval enabled, otherwise containers hang on restart - Move /healthz to default_server: Fly health checks send no Host header, so healthz must be on the catch-all server block - Change region from sea (deprecated) to sjc - Add iptables/ip6tables for TUN device support - Add proxy_ssl_server_name for proper TLS SNI Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
19 lines
292 B
TOML
19 lines
292 B
TOML
app = "blumeops-proxy"
|
|
primary_region = "sjc"
|
|
|
|
[build]
|
|
|
|
[http_service]
|
|
internal_port = 8080
|
|
force_https = true
|
|
auto_stop_machines = "off"
|
|
auto_start_machines = true
|
|
min_machines_running = 1
|
|
|
|
[checks]
|
|
[checks.health]
|
|
port = 8080
|
|
type = "http"
|
|
interval = "30s"
|
|
timeout = "5s"
|
|
path = "/healthz"
|