hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat/dossiers-ngi: add Caddy handle docs for cascade sticky bar

Browse source
This commit is contained in:
Hernâni Marques 2026-10-10 00:49:58 +02:00
parent 37ac6a2171
commit fe0c1e2b53
No known key found for this signature in database
2 changed files with 29 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/caddy/README.md
View file

@ -41,6 +41,10 @@ Host runtime: `/etc/caddy/secrets/dossiers-ngi-basicauth.txt` (root-only).
SoT: `koopa-admin-secrets-enc` (git-crypt) → `koopa/home-hernani/caddy/`. SoT: `koopa-admin-secrets-enc` (git-crypt) → `koopa/home-hernani/caddy/`.
Hosts: `dossiers.ngi` / `dossiers.2.ngi` / `dossiers.3.ngi`.hacktivism.ch Hosts: `dossiers.ngi` / `dossiers.2.ngi` / `dossiers.3.ngi`.hacktivism.ch
HTTP→HTTPS 308 for `dossiers.ngi` (add host to the shared ACME list, leave
HTTPS body alone): `scripts/dossiers-ngi/apply-dossiers-ngi-http-308.sh`
then `sudo ~/bin/caddy-apply`.
## silverbullet.hacktivism.ch — merge + basic_auth ## silverbullet.hacktivism.ch — merge + basic_auth
After podman cutover (`scripts/notes/cutover-to-silverbullet.sh --apply`) and DNS: After podman cutover (`scripts/notes/cutover-to-silverbullet.sh --apply`) and DNS:

25
scripts/dossiers-ngi/README.md
View file

@ -136,5 +136,30 @@ sudo ~/bin/caddy-apply
Stanza SoT: `scripts/dossiers-ngi/caddy-dossiers-ngi.snippet`. Stanza SoT: `scripts/dossiers-ngi/caddy-dossiers-ngi.snippet`.
## HTTP → HTTPS 308
Shared Caddy HTTP list already `redir https://{host}{uri} permanent` (308).
`dossiers.ngi.hacktivism.ch` was missing there → HTTP `200` empty body /
Firefox `NS_ERROR_NET_EMPTY_RESPONSE`. HTTPS site body stays untouched.
On koopa (hernani, then root apply):
```bash
# SoT: scripts/dossiers-ngi/apply-dossiers-ngi-http-308.sh
cp /path/to/apply-dossiers-ngi-http-308.sh ~/bin/
chmod +x ~/bin/apply-dossiers-ngi-http-308.sh
bash ~/bin/apply-dossiers-ngi-http-308.sh
sudo ~/bin/caddy-apply
```
Smoke after apply:
```bash
curl -sSI http://dossiers.ngi.hacktivism.ch/ | grep -Ei 'HTTP|location'
# 308 Location: https://dossiers.ngi.hacktivism.ch/
```
`.2` / `.3` stay off this list unless `SITE=` is set.
Caddy edition map must list each `editions/<slug>` explicitly. A map output of `{http.request.cookie.tdpd_edition}` did not expand on Caddy v2.11.4 (only `flask` worked → 404 for `main`/views). After new tips appear, refresh the snippet map (or regenerate from `ls editions`) before `apply-dossiers-ngi-edition-switch` + `caddy-apply`. Caddy edition map must list each `editions/<slug>` explicitly. A map output of `{http.request.cookie.tdpd_edition}` did not expand on Caddy v2.11.4 (only `flask` worked → 404 for `main`/views). After new tips appear, refresh the snippet map (or regenerate from `ls editions`) before `apply-dossiers-ngi-edition-switch` + `caddy-apply`.