paperless+docs: move public edge off Cloudflare tunnel to NetBird proxy #38

2026-06-26T09:40:32Z

k.renner commented

2026-06-26 09:40:32 +00:00

Moves the public edge for paperless.renner.uno and docs.renner.uno off the Cloudflare tunnel to the NetBird reverse proxy — same pattern as audiobooks.

Drops the external-dns/cloudflare label from the paperless and docs Ingresses and removes their two cloudflared tunnel routes. Service behaviour is unchanged — the paperless-gate Authentik outpost and the docs → paperless redirect stay exactly as they are; this only swaps the public ingress edge. LAN/mesh → Traefik is unaffected.

⚠️ Merge order (learned from audiobooks): merge this only after the paperless+docs proxy services + DNS are live, and roll cloudflared afterward. If merged first, both public names go dark in the gap.

🤖 Generated with Claude Code

Moves the public edge for **paperless.renner.uno** and **docs.renner.uno** off the Cloudflare tunnel to the NetBird reverse proxy — same pattern as audiobooks. Drops the `external-dns/cloudflare` label from the `paperless` and `docs` Ingresses and removes their two cloudflared tunnel routes. **Service behaviour is unchanged** — the `paperless-gate` Authentik outpost and the `docs → paperless` redirect stay exactly as they are; this only swaps the public ingress edge. LAN/mesh → Traefik is unaffected. ⚠️ **Merge order (learned from audiobooks):** merge this **only after** the paperless+docs proxy services + DNS are live, and roll cloudflared afterward. If merged first, both public names go dark in the gap. 🤖 Generated with Claude Code

k.renner added 1 commit 2026-06-26 09:40:32 +00:00

paperless+docs: move off Cloudflare tunnel to the NetBird proxy d97738b843

Drop the external-dns/cloudflare label from the paperless and docs
Ingresses and remove their cloudflared tunnel routes, so the public edge
for paperless.renner.uno / docs.renner.uno moves to the NetBird reverse
proxy. Service behaviour (the paperless-gate Authentik outpost, the
docs->paperless redirect) is unchanged — this only swaps the public
ingress edge. LAN/mesh resolution -> Traefik is unaffected.

MERGE ONLY AFTER the paperless+docs proxy services + DNS are live, and
roll cloudflared after, or the public names go dark in the gap (as
audiobooks did when done out of order).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

k.renner merged commit 66a1547f1d into master

2026-06-26 09:43:34 +00:00

k.renner referenced this issue from a commit

2026-06-26 09:43:36 +00:00

Merge pull request 'paperless+docs: move public edge off Cloudflare tunnel to NetBird proxy' (#38) from migrate-paperless-docs-to-proxy into master

claude-bot referenced this issue from a commit

2026-07-15 16:57:22 +00:00

fix(shelly-manager): wire ADMIN_PASSWORD/API key — app fails closed since auth hardening

claude-bot referenced this pull request

2026-07-15 16:58:18 +00:00

fix(shelly-manager): wire ADMIN_PASSWORD — app fails closed since auth hardening #246

Sign in to join this conversation.