Infra setup

.github/workflows/deploy.yml

@@ -1,4 +1,4 @@
 name: Deploy
 on:
   push:
     branches:
@@ -17,14 +17,13 @@
           ssh-private-key: ${{ secrets.VPS_SSH_KEY }}
       - name: Copy files to VPS
         run: |
           rsync -avz --delete ./public/ ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }}:~/Druv/
         env:
           RSYNC_RSH: "ssh -o StrictHostKeyChecking=no"
       - name: Deploy on VPS
         run: |
           ssh -o StrictHostKeyChecking=no ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }} << 'EOF'
           cd ~/Druv/
-          export TS_AUTHKEY="${{ secrets.TS_AUTHKEY }}"
           docker compose pull
           docker compose up -d --remove-orphans
           EOF

public/.env.sample

@@ -1 +1 @@
-TS_AUTHKEY=tskey-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+CLOUDFLARE_API_TOKEN=your-cloudflare-api-token-here

public/Caddyfile

@@ -1,7 +1,10 @@
-jellyfin.prinzpiuz.in {
-    reverse_proxy http://druv:8096
-    header_up Host {host}
-    header_up X-Real-IP {remote_host}
-    header_up X-Forwarded-For {remote_host}
-    header_up X-Forwarded-Proto {scheme}
+{
+    http_port 8082
 }
+
+jellyfin.prinzpiuz.in:8920 {
+    reverse_proxy druv.tail04bc7f.ts.net:8096
+    tls {
+        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
+    }
+ }

public/docker-compose.yml

@@ -1,28 +1,17 @@
 services:
-  tailscale:
-    image: tailscale/tailscale:stable
-    container_name: tailscale
-    hostname: '*.prinzpiuz.in'
-    privileged: true
-    network_mode: host
-    environment:
-      - TS_AUTHKEY=${TS_AUTHKEY}
-      - TS_STATE_DIR=/var/lib/tailscale
-      - TS_EXTRA_ARGS=--advertise-tags=tag:*.prinzpiuz.in
-    volumes:
-      - ./tailscale/state:/var/lib/tailscale
-      - /dev/net/tun:/dev/net/tun
-    restart: unless-stopped
   caddy:
-    image: caddy:latest
+    image: caddybuilds/caddy-cloudflare:alpine
     container_name: caddy_druv
-    depends_on:
-      - tailscale
-    ports:
-      - "80:80"
-      - "443:443"
+    network_mode: host
+    environment:
+      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
+    env_file:
+      - .env
     volumes:
       - ./Caddyfile:/etc/caddy/Caddyfile
       - ./caddy_data:/data
       - ./caddy_config:/config
+    ports:
+      - 8920:8920
+      - 8082:8082
     restart: unless-stopped