Support custom domains. Fix host-record/address resolution.
This commit is contained in:
@@ -113,8 +113,8 @@ When a service is registered, Central automatically:
|
||||
|
||||
| Effect | Passthrough | Terminate |
|
||||
|--------|-------------|-----------|
|
||||
| **LAN DNS** | `address=/<domain>/<backend-IP>` — direct to backend | `address=/<domain>/<central-IP>` — through Central |
|
||||
| **LAN DNS (private)** | Also `local=/<domain>/` — prevents upstream forwarding | Same |
|
||||
| **LAN DNS** | `host-record=<domain>,<backend-IP>` (exact) or `address=/<domain>/<backend-IP>` (wildcard if subdomains:true) | `host-record=<domain>,<central-IP>` (exact) or `address=/<domain>/<central-IP>` (wildcard if subdomains:true) |
|
||||
| **AAAA filtering** | `filter-AAAA` globally strips IPv6 from upstream responses (prevents Happy Eyeballs on IPv4-only LAN) | Same |
|
||||
| **Public DNS** | DDNS A record if public | Same |
|
||||
| **Proxy** | L4 SNI passthrough. Subdomains adds `*.domain` matching. | L7 HTTP reverse proxy by Host header. Routes add path-based ACLs. |
|
||||
| **TLS** | Backend handles — Central passes through | Central provisions cert via Let's Encrypt |
|
||||
@@ -147,7 +147,7 @@ Central creates: LAN DNS → Central IP, public DNS A record, HAProxy L7 TLS ter
|
||||
}
|
||||
```
|
||||
|
||||
Central creates: LAN DNS → Central IP (with `local=/`), HAProxy L7 reverse proxy, TLS cert via certbot. No public DNS.
|
||||
Central creates: LAN DNS → Central IP (host-record=, exact match), HAProxy L7 reverse proxy, TLS cert via certbot. No public DNS.
|
||||
|
||||
### Service with custom response headers
|
||||
|
||||
|
||||
Reference in New Issue
Block a user