3 Commits

Author	SHA1	Message	Date
Gan, Jimmy	9e85410340	fix: stabilize Immich mobile sync with timeout and ML fixes ... - Add 10m read/write timeouts to Caddy reverse proxy for photos domains - Fix ML service URL to use correct docker network hostname - Resolves 'Request aborted' errors during mobile photo uploads	2026-04-05 20:46:04 +08:00
Gan, Jimmy	c162164528	fix: add dev dashboard caddy route ... Add a dedicated dev.nas.jimmygan.com reverse proxy entry so the dev dashboard can be reached through the VPS Caddy configuration. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-07 11:50:56 +08:00
Gan, Jimmy	3fd045aacb	feat: security hardening and HTTPS/SSO infrastructure configs ... - Narrow trusted proxies, remove overly broad 10.0.0.0/8 - Fail closed on missing SSH known_hosts in terminal proxy - Add Navidrome reverse proxy headers for Authelia SSO - Add Gitea docker-compose definition - Add Caddy configs for NAS and VPS edge proxies - Add dnsmasq split-horizon DNS config - Add security execution plan document	2026-02-28 22:25:39 +08:00