docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177)
CI / lint (pull_request) Successful in 1m45s
CI / k8s (pull_request) Successful in 9s
CI / build (pull_request) Successful in 1m41s
CI / unit (pull_request) Successful in 2m3s
CI / frontend (pull_request) Successful in 2m23s
CI / mutation (pull_request) Successful in 5m39s
CI / verify-stack (pull_request) Skipped
CI / lint (pull_request) Successful in 1m45s
CI / k8s (pull_request) Successful in 9s
CI / build (pull_request) Successful in 1m41s
CI / unit (pull_request) Successful in 2m3s
CI / frontend (pull_request) Successful in 2m23s
CI / mutation (pull_request) Successful in 5m39s
CI / verify-stack (pull_request) Skipped
Records the decision #177 asked for, the other way round: the hypervisor has no inbound path and the labs Caddy already holds 80/443 and the wildcard cert, so the portals go through it over a reverse SSH tunnel instead of an in-cluster edge. Covers keycloakUrl, KC_PROXY_HEADERS and the optional demo OTP autofill. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -56,6 +56,7 @@ nav:
|
||||
- "ADR-0032: Werkbak live refresh": architecture/adr-0032-werkbak-live-refresh.md
|
||||
- "ADR-0033: Kubernetes via one Helm chart": architecture/adr-0033-kubernetes-via-one-helm-chart.md
|
||||
- "ADR-0034: Caddy serves the portals": architecture/adr-0034-caddy-serves-the-portals.md
|
||||
- "ADR-0035: Public access through the labs Caddy": architecture/adr-0035-public-access-through-the-labs-caddy.md
|
||||
- FDS-architectuur:
|
||||
- Overzicht: architecture/fds/README.md
|
||||
- Componentview (L3): architecture/fds/c4-component-view.md
|
||||
|
||||
Reference in New Issue
Block a user