Tizian 「ティツィアーン」
d8c827eab6
The instance serves jellyfin.halkyon.eu and its Caddy proxies through a WireGuard tunnel to a Jellyfin on the operator's own machine, which dials out, so nothing names the home network's address and its router opens no port. compose.jellyfin-home.yaml takes the sidecar's place, with its site's rules unchanged (jellyfin.caddy's upstream is now a setting), and leaves JELLYFIN_URL unset, so the instance suggests it only while it answers. On the instance's server the tunnel reaches Jellyfin from Caddy alone and nothing of the host (wg-jellyfin-rules.sh, set and removed with the tunnel); the CI runner's unit denies it, and CI's Sandbox step fails if a job reaches it. The home end keeps Jellyfin in WireGuard's network namespace, its port on the loopback alone. The steps are in deploy/sidecars/README.md, the rules held by test/deploy/jellyfin_home_test.dart. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
48 lines
1.3 KiB
Text
48 lines
1.3 KiB
Text
# Files and directories created by pub
|
|
.dart_tool/
|
|
.packages
|
|
|
|
# Flutter's build output. `flutter pub get` at the workspace root writes
|
|
# build/.last_build_id here while it generates the app's localizations
|
|
# (`generate: true`); the packages ignore their own build/.
|
|
/build/
|
|
|
|
# Pubspec overrides
|
|
pubspec_overrides.yaml
|
|
|
|
# Agents
|
|
.dart_skills/
|
|
.agents/
|
|
.claude/
|
|
.gemini/
|
|
.cursor/
|
|
.vscode/mcp.json
|
|
.codex/
|
|
.mcp.json
|
|
|
|
# Serverpod Cloud CLI
|
|
.scloud/
|
|
# Deployment secrets (see deploy/.env.example)
|
|
deploy/.env
|
|
# The assistants and their keys (see deploy/assistants.env.example)
|
|
deploy/assistants.env
|
|
# A sidecar's files on the server, such as Jellyfin's configuration and media
|
|
deploy/jellyfin/
|
|
# Jellyfin at home's own (ADR 0032): the tunnel's key, Jellyfin's files, the media's path
|
|
deploy/home-jellyfin/.env
|
|
deploy/home-jellyfin/wireguard/
|
|
deploy/home-jellyfin/jellyfin/
|
|
deploy/languagetool/
|
|
# BRouter's segments, the map's tiles and Photon's database (Train's ADR 0030, D44,
|
|
# D50), downloaded on
|
|
# an instance
|
|
deploy/brouter/segments/
|
|
deploy/maps/tiles/
|
|
deploy/photon/data/
|
|
# Dictionary files an instance loads: made by halkyon_learn_curator, not kept in git.
|
|
deploy/dictionaries/*.jsonl
|
|
deploy/dictionaries/*.jsonl.gz
|
|
deploy/dictionaries/.conversion
|
|
|
|
# Snaps built by `snapcraft pack` in the repository root.
|
|
/*.snap
|