No description
Find a file
Claude 73ea7320fd
fix: use Caddy internal CA when ACME_EMAIL is not set
DOMAIN_SUFFIX=local (or any non-localhost LAN name) caused a TLS handshake
failure because Caddy attempted an ACME challenge that can never succeed for
private domains.

- Caddyfile: tls {$ACME_EMAIL:internal} — falls back to Caddy's built-in CA
  when ACME_EMAIL is absent, uses Let's Encrypt when it is set.
- start.sh: ACME_EMAIL is now optional; missing it prints a warning instead
  of aborting, so local/LAN setups work without an email address.

To trust the self-signed cert in a browser run: caddy trust

https://claude.ai/code/session_01FKCW3FDjNFj6jve4niMFXH
2026-03-25 22:09:00 +00:00
builder feat: M4 Hardening — encryption, resource limits, monitoring, backups 2026-03-24 15:06:42 +00:00
docs feat: M4 Hardening — encryption, resource limits, monitoring, backups 2026-03-24 15:06:42 +00:00
infra fix: use Caddy internal CA when ACME_EMAIL is not set 2026-03-25 22:09:00 +00:00
proxy fix: use Caddy internal CA when ACME_EMAIL is not set 2026-03-25 22:09:00 +00:00
scripts feat: git push deploy (roadmap step 2) 2026-03-23 08:54:55 +00:00
server feat: M4 Hardening — encryption, resource limits, monitoring, backups 2026-03-24 15:06:42 +00:00
.dockerignore Add .dockerignore to drop build context from ~1.8 GB to a few KB 2026-03-22 10:13:53 +00:00
.env.example Add session-based auth to dashboard and API 2026-03-20 13:45:16 +00:00
.gitattributes Add .gitattributes: force LF line endings for shell scripts 2026-03-19 09:40:26 +00:00
.gitignore chore: gitignore generated proxy/caddy.json 2026-03-22 18:18:08 +00:00
Cargo.lock feat: M4 Hardening — encryption, resource limits, monitoring, backups 2026-03-24 15:06:42 +00:00
Cargo.toml M1: Rust control plane, builder, dashboard, and infra 2026-03-19 08:25:59 +00:00
README.md readme 2026-03-24 15:48:16 +01:00

Be in control of YOUR apps and YOUR data

Features

  • Deploy ANY containerized apps in seconds
  • Builtin security
  • Builtin postgres
  • Uses podman for app isolation
  • Runs on your hardware (linux vm/host)
  • Integrate with git using github webhooks or add your own git remote
    • automatic redeployment after git push
  • Builtin ssl. Automatically provisioned using let's encrypt.