diff options
Diffstat (limited to 'CLAUDE.md')
| -rw-r--r-- | CLAUDE.md | 10 |
1 files changed, 8 insertions, 2 deletions
@@ -5,7 +5,7 @@ Bastion is a self-hosted server system on Debian that runs multiple services in ## Domain - Primary domain: `swave.lol` -- Subdomains: `blog.swave.lol`, `jenkins.swave.lol`, `cgit.swave.lol`, `gerrit.swave.lol` +- Subdomains: `blog.swave.lol`, `ghost.swave.lol`, `jenkins.swave.lol`, `cgit.swave.lol`, `gerrit.swave.lol` ## Services / Stacks @@ -19,7 +19,9 @@ Bastion is a self-hosted server system on Debian that runs multiple services in - Compose: `ghost/compose.yml`, env: `ghost/stack.env` (for Portainer) or `.env` (for local) - Network: `ghost_network` - Services: ghost (port 2368), ghost-db (MySQL 8), activitypub (optional, profile-gated) -- Accessible at `https://swave.lol` and `https://blog.swave.lol` +- Accessible at `https://swave.lol`, `https://blog.swave.lol`, and `https://ghost.swave.lol` +- URL must be configured as `https://` in compose.yml (Ghost caches URL config internally) +- DOMAIN in stack.env must be the bare domain (e.g., `swave.lol`) without a port number ### Git Server - Dir: `git-server/` @@ -70,6 +72,8 @@ Bastion is a self-hosted server system on Debian that runs multiple services in - Config mounted from `/var/nginx/conf/` on host - SSL: Let's Encrypt certs via `run_certbot.sh`, dhparam at `/var/dh_param/` - SSL protocols: TLSv1.2 + TLSv1.3 only +- Default catch-all server blocks return 404 error page for unknown subdomains +- Error page: `nginx/error-pages/unknown-host.html` - IMPORTANT: SSL server blocks must be commented out for first run (before certs exist) ## Networking @@ -94,6 +98,8 @@ Each stack has its own Docker network. Nginx joins all of them to reverse proxy: - `jenkins/kernel-builder/Dockerfile` — custom Docker image for building the Linux kernel - `jenkins/init.groovy.d/clear-stuck-builds.groovy` — startup script to clean stuck pipeline executions - `ghost/.env.example` — template for Ghost env vars +- `doc/git-performance.md` — git server performance tuning guide +- `nginx/error-pages/unknown-host.html` — 404 page for unknown subdomains - `.gitignore` — excludes `.env` files (secrets) ## Conventions |