blumeops/docs/changelog.d/docs-expose-service-publicly.doc.md at 1de5492d6c56cbeff89eacda869bdf915e90cef7

Erich Blume 1de5492d6c Rewrite public exposure guide to Fly.io + Tailscale approach

Replace the Cloudflare Tunnel plan with a Fly.io reverse proxy
architecture that tunnels back to indri over Tailscale. Covers:
- Full architecture with nginx proxy cache + rate limiting
- One-time setup vs per-service steps
- Fly.io container (Dockerfile, fly.toml, nginx.conf, start.sh)
- Pulumi IaC for Tailscale auth key + DNS CNAMEs
- Forgejo CI workflow for automated deploys
- Security model, DDoS considerations, break-glass shutoff
- Mise tasks: fly-deploy, fly-setup, fly-shutoff

Also fix docs-check-links to handle in-page anchor links
([[#Heading]]) and cross-file anchors ([[file#Heading]]).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-08 00:08:23 -08:00

93 B

Raw Blame History

Add how-to guide for exposing services publicly via Fly.io reverse proxy + Tailscale tunnel.

93 B Raw Blame History

93 B

Raw Blame History