Files
stack/infra/coredns/hosts
kert 982777addb feat: public SSO — fhirworx.io domain, Gitea OAuth2, Cloudflare tunnel
Migrate from homelab.fhirworx.io (LAN-only, IP allowlist) to
fhirworx.io (public, Gitea SSO via oauth2-proxy).

- Domain: homelab.fhirworx.io → fhirworx.io across all configs
- SSO: oauth2-proxy (OIDC/Gitea) + auth-handler nginx for Traefik
  ForwardAuth (converts 401 → 302 redirect, same as corwins.media
  auth_request pattern)
- Cloudflared: tunnel remote config with 20 hostnames → traefik,
  DNS CNAME records via CF API
- Bootstrap: `docker compose run --rm wire` — idempotent cold-start
  that creates Gitea admin, OAuth2 app, oauth2-proxy credentials,
  clears Cloudflare Access apps, syncs tunnel config + DNS
- Dashboard: rebranded FHIRWORX, HTTPS links, API tile added
- Grafana/Woodpecker/Gitea ROOT_URLs updated to HTTPS
2026-04-09 19:06:33 -04:00

21 lines
650 B
INI

192.168.1.192 fhirworx.io
192.168.1.192 dashboard.fhirworx.io
192.168.1.192 docs.fhirworx.io
192.168.1.192 gitea.fhirworx.io
192.168.1.192 ci.fhirworx.io
192.168.1.192 notebooks.fhirworx.io
192.168.1.192 zotero.fhirworx.io
192.168.1.192 webdav.fhirworx.io
192.168.1.192 api.fhirworx.io
192.168.1.192 nessie.fhirworx.io
192.168.1.192 trino.fhirworx.io
192.168.1.192 polaris.fhirworx.io
192.168.1.192 grafana.fhirworx.io
192.168.1.192 prometheus.fhirworx.io
192.168.1.192 jaeger.fhirworx.io
192.168.1.192 loki.fhirworx.io
192.168.1.192 s3.fhirworx.io
192.168.1.192 s3console.fhirworx.io
192.168.1.192 traefik.fhirworx.io
192.168.1.192 auth.fhirworx.io