Erich Blume 903db4079d Fix upstream keepalive: set proxy_ssl_name for correct SNI ... With upstream blocks, nginx sends the block name as SNI instead of the actual hostname. The Tailscale Ingress proxy needs the correct SNI to route TLS connections. Add explicit proxy_ssl_name for each upstream, and set Host header for docs/cv backends. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-17 15:51:51 -07:00
..
fail2ban	Expose Forgejo publicly at forge.eblu.me (#278)	2026-03-03 08:40:41 -08:00
alloy.river	Add Forgejo metrics + upstream latency histogram to Fly proxy dashboard	2026-04-17 15:05:59 -07:00
Dockerfile	Pin Fly.io Tailscale to v1.94.1 to fix MagicDNS regression in v1.96.5	2026-04-10 19:32:38 -07:00
error.html	Serve friendly error page when Fly.io proxy upstreams are unreachable (#133)	2026-02-09 12:01:24 -08:00
fly.toml	Bump Fly.io proxy VM to 512MB, fix TruffleHog scanning (#152)	2026-02-11 12:03:51 -08:00
nginx.conf	Fix upstream keepalive: set proxy_ssl_name for correct SNI	2026-04-17 15:51:51 -07:00
start.sh	Wait for MagicDNS readiness before starting nginx	2026-04-17 15:47:21 -07:00