feat: enabled reverse proxy on beacon

jan-leila commented

2026-07-26 18:22:42 -05:00

Owner

Enables the same services.reverseProxy module defiant uses on beacon, so beacon services can register per-service proxy.nix entries instead of hand-rolling nginx vhosts (volpe keeps its direct nginx setup: its static file root and loopback-only onion listeners don't fit the proxy model; its vhosts coexist with the proxy's). Also adds the catch-all vhost that drops requests for unmatched domains (444).

Post-deploy: nothing — no behavior change for existing services. Ports 80/443 were already open and the ACME terms/email were already configured by volpe; the proxied services arrive in the follow-up PRs.

Enables the same services.reverseProxy module defiant uses on beacon, so beacon services can register per-service proxy.nix entries instead of hand-rolling nginx vhosts (volpe keeps its direct nginx setup: its static file root and loopback-only onion listeners don't fit the proxy model; its vhosts coexist with the proxy's). Also adds the catch-all vhost that drops requests for unmatched domains (444). Post-deploy: nothing — no behavior change for existing services. Ports 80/443 were already open and the ACME terms/email were already configured by volpe; the proxied services arrive in the follow-up PRs.

jan-leila added 1 commit

2026-07-26 18:22:42 -05:00

feat: enabled reverse proxy on beacon

build PR #21: queued

00f8348a51

jan-leila added 1 commit

2026-07-26 18:34:20 -05:00

refactor: moved volpe acme and firewall to the reverse proxy

build PR #21: checks passed

82a5d528ef

jan-leila scheduled this pull request to auto merge when all checks succeed

2026-07-26 18:37:51 -05:00