4 Commits

Author	SHA1	Message	Date
Siavash Sameni	47030a3b29	fix: Caddy host network mode for real client IPs ... - Caddy now uses network_mode: host (sees real IPv4/IPv6) - All backend services on fixed IPs (172.28.0.10/20/30) - Caddyfile uses IPs instead of Docker DNS names - /myip now returns actual client IP, not Docker gateway Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 11:19:23 +04:00
Siavash Sameni	11133cf968	fix: use fixed IP for wzp-relay (wzp-web can't resolve hostnames) ... wzp-web --relay only accepts IP:port, not Docker hostnames. Fixed IP 172.28.0.10 on backend network with explicit subnet. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 11:03:43 +04:00
Siavash Sameni	59d68b2a5e	fix: build Caddy with CF plugin from source (ARM64 compat) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 10:14:33 +04:00
Siavash Sameni	f33ac1cad8	deploy: Docker Compose stack with Caddy + Cloudflare TLS ... Full production stack via docker compose: - Caddy reverse proxy with Cloudflare DNS-01 TLS certs - warzone-server (featherChat API + web UI) - wzp-relay (QUIC audio SFU) - wzp-web (browser WS ↔ QUIC bridge) Architecture: Internet → Caddy (443/TLS) → voip.manko.yoga /* → warzone-server:7700 /audio/* → wzp-web:8080 Files: - docker-compose.yml: main stack (4 services) - docker-compose.ipv6.yml: IPv6 overlay - Caddyfile: Cloudflare DNS challenge + reverse proxy - Dockerfile.server: featherChat multi-stage build - Dockerfile.wzp: wzp-relay + wzp-web multi-stage build - .env.example: DNS records for dev/staging/prod - test-stack.sh: smoke test (8 checks) - .dockerignore: excludes target/, .git/, etc. Deployment targets: dev: 172.16.81.135 ipv6: 2a0d:3344:692c:2500:14f2:5885:d73c:b0a1 prod: 63.250.54.239 / 2602:ff16:9:0:1:3d9:0:1 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 10:00:47 +04:00