blumeops/docs/changelog.d
Erich Blume c6f8fcd346
All checks were successful
Deploy Fly.io Proxy / deploy (push) Successful in 1m3s
Fix fly-deploy WARNING by starting nginx before Tailscale (#128)
## Summary
- Start nginx before Tailscale in `start.sh` so port 8080 is bound immediately, eliminating the "app is not listening on the expected address" WARNING during `fly deploy`
- Switch `proxy_pass` to use a variable with `resolver 100.100.100.100 valid=30s` so nginx can start without resolving MagicDNS names at config load time
- DNS results cached 30s per worker — no per-request lookup overhead

## Context
The WARNING was a race condition: Fly checks for listeners right after the machine starts, but `start.sh` ran ~5-10s of Tailscale setup before starting nginx. The health check always passed later, but the warning was noisy.

## Test plan
- [ ] Merge and let the deploy-fly workflow trigger
- [ ] Check runner logs for absence of the WARNING
- [ ] Verify `docs.eblu.me` still serves correctly
- [ ] Verify `/healthz` still passes

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/128
2026-02-09 07:01:58 -08:00
..
.gitkeep Add towncrier changelog system (#86) 2026-02-03 11:48:13 -08:00
feature-blumeops-tasks-due-date-filter.feature.md Filter blumeops-tasks to hide future-dated tasks (#124) 2026-02-08 10:38:44 -08:00
fix-fly-deploy-warnings.bugfix.md Fix fly-deploy WARNING by starting nginx before Tailscale (#128) 2026-02-09 07:01:58 -08:00
op-read-migration.infra.md Migrate Ansible op calls to op read URI syntax (#125) 2026-02-08 10:52:43 -08:00
restrict-flyio-proxy-acl.infra.md Restrict flyio-proxy ACLs to dedicated tag:flyio-target endpoints (#126) 2026-02-08 21:54:18 -08:00