Tunnel rss.rubenhensen.nl through Hetzner

Point rss to the Hetzner box and reverse-proxy/SNI-passthrough back to
the home cluster so cert-manager keeps owning the certificate. Move
stalwart's HTTPS listener to 127.0.0.1:8443 so nginx can take :443 and
dispatch by SNI.
This commit is contained in:
Ruben Hensen
2026-05-19 22:45:55 +02:00
parent 790d7d6f32
commit ff9c2d3cef
2 changed files with 45 additions and 3 deletions
+1 -1
View File
@@ -34,7 +34,7 @@ records:
- name: "rss"
expire: 300
type: A
content: "62.41.87.114"
content: "46.224.26.65"
- name: "ha"
expire: 300
type: A