hetzner-infra/git, branch master

Move forward proxy from Squid to Caddy (port 80/443)

2026-07-02T14:08:58+00:00

Replace standalone Squid container with caddy-forwardproxy plugin so the
proxy shares Caddy's existing ports and TLS. HTTP on :80 and HTTPS on :443.
Auth is read from the same vpn/users.conf at Caddy startup via entrypoint.sh.
DNS: add proxy to setup-route53.py WEB_SUBDOMAINS.

Co-Authored-By: Claude Sonnet 4.6

Add HTTPS forward proxy service (Squid on port 8443)

2026-07-02T13:58:56+00:00

- proxy/: Squid container with HTTPS port, Basic auth from vpn/users.conf
- caddy/Caddyfile: add proxy.yyamashita.com block (RSA cert for compat)
- git/hooks: add proxy/deploy.sh to post-receive hook
- CLAUDE.md: document proxy setup and client config

Co-Authored-By: Claude Sonnet 4.6

Add strongSwan IKEv2 VPN service

2026-06-30T13:29:07+00:00

- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh
- install.sh: Caddy 証明書流用 + コンテナ起動
- renew-cert.sh: 証明書更新 + swanctl ホットリロード
- caddy/Caddyfile: vpn.yyamashita.com 追加（Let's Encrypt 証明書取得用）
- post-receive: vpn/deploy.sh を追加
- setup-route53.py: WEB_SUBDOMAINS に vpn を追加

Co-Authored-By: Claude Sonnet 4.6

Add microblog service

2026-06-19T06:19:00+00:00

- Caddy: route blog.yyamashita.com → microblog-app:3000
- git: add microblog post-receive hook and update work tree path to /app/microblog
- DNS: add blog subdomain to Route 53 WEB_SUBDOMAINS

Co-Authored-By: Claude Sonnet 4.6

Add microblog repo and Claude session

2026-06-19T05:53:33+00:00

Co-Authored-By: Claude Sonnet 4.6

Add hetzner-admin: SSH-based server management web UI

2026-06-19T04:39:27+00:00

Basic Auth protected web UI with buttons to restart services and reboot.
SSH key with authorized_keys command= restriction limits executable commands.

Co-Authored-By: Claude Sonnet 4.6

Add mosquitone-admin repo and Claude session

2026-06-09T16:30:42+00:00

Register mosquitone-admin as a managed git repo with post-receive checkout
hook, and add yyamashita:mosquitone-admin to the Claude Code session list.

Co-Authored-By: Claude Sonnet 4.6

Revert "Add cron job registration to install.sh"

2026-06-02T01:41:52+00:00

This reverts commit 5e9ed4fe05eda672293dbfe6bf10da6d9635261b.

Add cron job registration to install.sh

2026-06-02T01:39:33+00:00

Registers daily scrape (05:00 JST) and recap email (08:00 JST) jobs
for tokyo-livehouse-events via idempotent crontab install.

Co-Authored-By: Claude Sonnet 4.6

Add Postfix+OpenDKIM MTA with txt-based domain management

2026-06-01T12:14:58+00:00

- mail/ ディレクトリ追加: Postfix + OpenDKIM の Docker コンテナ
- mail/domains.txt で送信ドメインを管理（現在: golive.yyamashita.com）
- install.sh が domains.txt から KeyTable/SigningTable を動的生成
- setup-route53.py で SPF/DKIM/DMARC を Route 53 に一括設定
- post-receive フックに mail/deploy.sh を追加

Co-Authored-By: Claude Sonnet 4.6