hetzner-infra/caddy, branch master

studio: /healthz を認証なしにして status から監視する

2026-11-01T00:26:42Z

Co-Authored-By: Claude Opus 5.5

studio.yyamashita.com に Basic 認証を付ける

2026-11-01T00:22:13Z

Co-Authored-By: Claude Opus 5.5

studio.yyamashita.com を公開

2026-11-01T00:12:32Z

Co-Authored-By: Claude Opus 5.5

caddy: reload config on deploy so Caddyfile changes take effect

2026-10-31T10:30:08Z

Co-Authored-By: Claude Opus 5.5

Consolidate status pages into status.yyamashita.com

2026-10-31T10:28:45Z

Drop Uptime Kuma (uptime.yyamashita.com) and the hetzner-admin /status page; status-app + ntfy alerts is the single status site. hetzner-admin now just links to it. Co-Authored-By: Claude Opus 5.5

Add status pages, ntfy alerts, and license-slot-checker repo

2026-10-31T04:20:27Z

- status/: lightweight status checker (status.yyamashita.com, /api/status) with ntfy DOWN/recovered alerts after consecutive failures - uptime-kuma/: Uptime Kuma at uptime.yyamashita.com - hetzner-admin: authenticated /status page (status-app results + docker ps -a) - ntfy/: self-hosted ntfy at ntfy.yyamashita.com (deny-all auth, install.sh creates admin user and status-app token) - Caddyfile, DNS, post-receive hook, tests/check.sh, docs updated - license-slot-checker: add to repos.txt, hook, and Claude sessions Co-Authored-By: Claude Opus 5.5

Add todo service: Caddyfile, repos.txt, hook, DNS entry

2026-08-22T10:21:18Z

Co-Authored-By: Claude Sonnet 4.6

Dedupe Caddyfile with snippets, sync docs with reality, add tests/check.sh

2026-07-11T11:35:09Z

- Caddyfile: extract repeated header blocks into (noindex)/(crawler_bypass) snippets (adapted JSON verified byte-identical to previous config) - CLAUDE.md: add mosquitone-admin/microblog to repos table; document that proxy auth is disabled (PROXY_NO_AUTH=1) with JP-only IP filter instead - Deploy.md/caddy/README.md: reflect all-service deploy and forward proxy - tests/check.sh: shell/python syntax, repos.txt<->hooks<->sessions.txt consistency, app.py COMMANDS vs run-command.sh whitelist, secrets check Co-Authored-By: Claude Opus 4.7

Restrict proxy to Japan IPs using ipdeny.com CIDR list

2026-07-02T15:45:51Z

Downloads jp-aggregated.zone from ipdeny.com at container startup (no account required). Falls back to open access if download fails. Removed caddy-maxmind-geoip module (no longer needed). Co-Authored-By: Claude Sonnet 4.6

Add GeoIP Japan-only filter to forward proxy

2026-07-02T15:40:17Z

Uses caddy-maxmind-geoip module to restrict proxy access to JP IPs. DB file (GeoLite2-Country.mmdb) must be placed manually on the server. Filter is inactive when DB file is absent, allowing safe rollout. Co-Authored-By: Claude Sonnet 4.6