blumeops/docs/reference/infrastructure
Erich Blume fe0e913963
All checks were successful
Deploy Fly.io Proxy / deploy (push) Successful in 1m37s
Switch Fly proxy to upstream keepalive pools (#337)
## Summary

- Replace per-request DNS resolution (variable-based `proxy_pass`) with static `upstream` blocks and `keepalive` connection pools
- Reuses TLS connections through the Tailscale tunnel instead of handshaking per request
- Add `mise run fly-reload` for nginx config reload without full redeploy (re-resolves upstream DNS)

## Trade-off

DNS is resolved at config load, not per-request. If Tailscale Ingress pods get new IPs (restart, reschedule), `mise run fly-reload` is needed. A Grafana alert will be added to detect this.

## Still TODO on this branch

- [ ] Grafana alert for upstream unreachable (triggers fly-reload reminder)
- [ ] Docs pass
- [ ] Deploy from branch and verify latency improvement
- [ ] Changelog fragment

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #337
2026-04-17 16:39:52 -07:00
..
gandi.md Review gandi.md: add missing forge.eblu.me CNAME record 2026-04-09 09:54:46 -07:00
gilbert.md Add last-updated subsort to docs-review, review gilbert card 2026-03-17 13:22:01 -07:00
hosts.md Review hosts.md: add last-reviewed, normalize links, add reference tag 2026-04-11 21:06:53 -07:00
indri.md
power.md Review power.md: add ringtail, mark reviewed 2026-03-18 07:37:31 -07:00
ringtail.md Pin NixOS service versions via nixpkgs-services overlay (#321) 2026-04-01 21:37:57 -07:00
routing.md Switch Fly proxy to upstream keepalive pools (#337) 2026-04-17 16:39:52 -07:00
tailscale.md Review and correct Tailscale reference doc 2026-03-22 18:18:45 -07:00
unifi.md