api.apess.redclaw.dev is a multi-level subdomain that Cloudflare Universal SSL and the *.redclaw.dev origin cert don't cover (edge TLS handshake fails). Switch the API host to apess-api.redclaw.dev, which the existing edge + origin certs cover with no paid Cloudflare features. Updates the client API base default, the Traefik router host, and deploy docs. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
21 lines
679 B
YAML
21 lines
679 B
YAML
# APESS 2026 — collective API Traefik dynamic config (file provider)
|
|
# Lives at /home/redclaw/projects/clawbooks/deploy/traefik/dynamic/apess-api.yml on gw-03.
|
|
# Cert: reuses the *.redclaw.dev Cloudflare Origin Cert already loaded by apess.yml.
|
|
# Service backend: apess-api container on clawbooks-net (port 3000).
|
|
# WebSocket (/ws) is proxied automatically by Traefik v3 — no extra middleware.
|
|
http:
|
|
routers:
|
|
apess-api:
|
|
rule: "Host(`apess-api.redclaw.dev`)"
|
|
entryPoints:
|
|
- websecure
|
|
service: apess-api
|
|
tls: {}
|
|
priority: 1000
|
|
|
|
services:
|
|
apess-api:
|
|
loadBalancer:
|
|
servers:
|
|
- url: "http://apess-api:3000"
|