feat(new-service): --public opt-in via Cloudflare Tunnel; delete-service removes the CNAME

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
nholtware 2026-11-11 12:45:47 -06:00
parent 4b6f898089
commit e094cdbdd9
4 changed files with 110 additions and 6 deletions

View file

@ -14,3 +14,9 @@ KUBECONFIG=$HOME/.kube/homelab.yaml
INGRESS_DOMAIN=lab.holtlabs.xyz # services at https://<name>.$INGRESS_DOMAIN (renders __DOMAIN__)
INGRESS_IP=192.168.1.83 # health checks use curl --resolve, no DNS needed (TLS still verified)
# Public access (Plan 13): `new-service --public` adds https://<name>.$PUBLIC_DOMAIN via the Cloudflare Tunnel.
PUBLIC_DOMAIN=holtlabs.xyz
CF_ZONE_ID=f85fa3d7556872a69c4b24cc0c16a3a4 # zone holtlabs.xyz
CF_TUNNEL_ID=a7032422-b137-456a-ba9b-424dc99b4b46 # tunnel platform-homelab; CNAME target <id>.cfargotunnel.com
CLOUDFLARE_TOKEN_FILE=$HOMELAB_SECRETS/cloudflare-dns-token # Plan 11 token (Zone DNS edit)