Erich Blume 0c6223fcf1 Fix Fly.io proxy: use TUN networking, preauthorize key, move healthz ... Resolves multiple issues found during first deploy: - Drop --tun=userspace-networking: Fly.io Firecracker VMs support TUN natively; userspace mode broke MagicDNS and Tailscale IP routing - Add preauthorized=True to TailnetKey: required when tailnet has device approval enabled, otherwise containers hang on restart - Move /healthz to default_server: Fly health checks send no Host header, so healthz must be on the catch-all server block - Change region from sea (deprecated) to sjc - Add iptables/ip6tables for TUN device support - Add proxy_ssl_server_name for proper TLS SNI Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-02-08 02:16:19 -08:00
..
.gitignore	Fix Pulumi venv: re-lock via devpi, add sync with fallback hint	2026-02-08 01:19:37 -08:00
__main__.py	Fix Fly.io proxy: use TUN networking, preauthorize key, move healthz	2026-02-08 02:16:19 -08:00
policy.hujson	Add Fly.io public reverse proxy infrastructure	2026-02-08 01:01:25 -08:00
Pulumi.tail8d86e.yaml	Add Gandi DNS management via Pulumi (#54)	2026-01-25 08:15:46 -08:00
Pulumi.yaml	Add Gandi DNS management via Pulumi (#54)	2026-01-25 08:15:46 -08:00
pyproject.toml	Add Gandi DNS management via Pulumi (#54)	2026-01-25 08:15:46 -08:00
uv.lock	Fix Pulumi venv: re-lock via devpi, add sync with fallback hint	2026-02-08 01:19:37 -08:00