cce29c595d
Files changed: ", c.get(k))\nPY\n\\\"\n\"" engine/config.yaml engine/lib/lint.py engine/lib/vocab_gen.py engine/lint-report.md engine/sweep.sh vault/.obsidian/workspace.json vault/archive/projects/meshai-native-fire-severity-audit-cc-handoff.md vault/archive/projects/vaultwarden-plan.md vault/docs/matrix/matrix_host.md vault/docs/matrix/synapse.md vault/docs/services/services.md vault/docs/software/authentik.md vault/docs/software/caddy.md vault/docs/software/dns.md vault/docs/software/recon.md vault/docs/software/searxng.md vault/glossary.md vault/notes/echo6-landing-page-data-export.md vault/projects/matrix-synapse-deployment.md vault/projects/meshai.md vault/projects/meshtastic-headscale-runbook.md vault/projects/mmud-project.md vault/runbooks/add-peertube-channel.md vault/runbooks/authentik-access-groups.md vault/runbooks/authentik-create-invitation.md vault/runbooks/authentik-oidc-application.md vault/runbooks/authentik-upgrade.md vault/runbooks/expose-service-contabo.md vault/runbooks/lxc-service-migration.md vault/runbooks/mailcow-create-mailbox.md vault/runbooks/meshtastic-sidecar-node.md vault/runbooks/meshtasticd-sim-nodes-runbook.md vault/runbooks/proxmox-create-ubuntu-vm.md vault/runbooks/recon-operations.md vault/runbooks/recon-service-integration.md vault/runbooks/syncthing-add-node.md
96 lines
1.9 KiB
Markdown
Executable file
96 lines
1.9 KiB
Markdown
Executable file
---
|
|
title: Expose Service on Contabo
|
|
type: runbook
|
|
tags:
|
|
- dns
|
|
aliases: []
|
|
related:
|
|
- [[expose-service-edge2]]
|
|
- [[expose-service-home]]
|
|
- [[lxc-service-migration]]
|
|
- [[headscale-onboard-node]]
|
|
- [[caddy]]
|
|
updated: 2026-07-11
|
|
---
|
|
# Expose Service on Contabo
|
|
|
|
> SUPERSEDED — Contabo was decommissioned 2026-06-19. Use [[expose-service-edge2]] (services) or [[expose-service-contabo]]→edge1 for mail. This doc is kept for history only.
|
|
|
|
## Prerequisites
|
|
- Service running in Docker on Contabo
|
|
- Port bound to `127.0.0.1` only (never `0.0.0.0`)
|
|
|
|
## Steps
|
|
|
|
### 1. Deploy the service
|
|
|
|
```bash
|
|
ssh root@100.64.0.6
|
|
mkdir -p /opt/<service>
|
|
# Create docker-compose.yml with port bound to 127.0.0.1:<port>
|
|
docker compose up -d
|
|
```
|
|
|
|
### 2. Add DNS record
|
|
|
|
```bash
|
|
# On TOC
|
|
source /home/zvx/projects/.ref/credentials
|
|
godaddy-dns.py add-a echo6.co <service> 5.189.158.149
|
|
dig +short <service>.echo6.co @8.8.8.8 # Verify
|
|
```
|
|
|
|
### 3. Add Caddy site block
|
|
|
|
```bash
|
|
ssh root@100.64.0.6
|
|
nano /etc/caddy/Caddyfile
|
|
|
|
# Add:
|
|
# <service>.echo6.co {
|
|
# reverse_proxy 127.0.0.1:<port>
|
|
# }
|
|
|
|
caddy validate --config /etc/caddy/Caddyfile
|
|
systemctl reload caddy
|
|
```
|
|
|
|
### 4. Add dnsmasq split DNS entry
|
|
|
|
```bash
|
|
ssh root@100.64.0.6
|
|
nano /etc/dnsmasq.d/tailscale-dns.conf
|
|
|
|
# Add:
|
|
# address=/<service>.echo6.co/100.64.0.6
|
|
|
|
systemctl restart dnsmasq
|
|
```
|
|
|
|
### 5. Verify
|
|
|
|
```bash
|
|
# Public
|
|
curl -I https://<service>.echo6.co
|
|
|
|
# Tailscale
|
|
dig +short <service>.echo6.co @100.64.0.6 # Should return 100.64.0.6
|
|
```
|
|
|
|
### 6. Update docs
|
|
|
|
- Update `~/.claude/docs/infrastructure/caddy.md` with new site block
|
|
- Update `~/.claude/docs/infrastructure/services.md` with new service
|
|
- Add credentials to `/home/zvx/projects/.ref/credentials` if applicable
|
|
|
|
## Checklist
|
|
|
|
```
|
|
□ Docker container running, port on 127.0.0.1 only
|
|
□ GoDaddy DNS → 5.189.158.149
|
|
□ Caddy site block added and reloaded
|
|
□ dnsmasq entry added and restarted
|
|
□ Public access verified
|
|
□ Tailscale access verified
|
|
□ Docs updated
|
|
```
|