Commit graph

3 commits

Author SHA1 Message Date
codex
9ee20967ca RPF-WP-0047: HSTS for bao.coulomb.social only (no includeSubDomains)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4
2026-09-24 00:56:22 +02:00
codex
8cd7615eea RPF-WP-0047: allow Traefik to reach the cert-manager HTTP-01 solver (8089)
The isolation policy blocked the solver pod, so the challenge got 502.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4
2026-09-24 00:54:40 +02:00
codex
960ed0914f RPF-WP-0047: static notice page manifests for bao.coulomb.social
Isolated namespace (Traefik-only ingress, no egress), pinned unprivileged
nginx, / -> 200 notice, every other path -> 404, letsencrypt-prod TLS,
HTTP->HTTPS redirect. Nothing proxies to OpenBao.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4
2026-09-24 00:52:07 +02:00