Skip to content

feat(cloudflare): drop public auth.fuzefront.com tunnel route/DNS - #268

Draft
izzywdev wants to merge 1 commit into
mainfrom
claude/issue-255-20260714-1357
Draft

feat(cloudflare): drop public auth.fuzefront.com tunnel route/DNS#268
izzywdev wants to merge 1 commit into
mainfrom
claude/issue-255-20260714-1357

Conversation

@izzywdev

Copy link
Copy Markdown
Owner

Auto-opened from branch claude/issue-255-20260714-1357.

Closes #255

FuzeFront now reverse-proxies its Authentik IdP under
app.fuzefront.com/api/auth/idp/* (izzywdev/FuzeFront#247), so the public
auth.fuzefront.com host is no longer needed.

Remove `auth` from `public_vanity_hosts` so the proxied CNAME
(cloudflare_record.vanity) for auth.fuzefront.com is retired. With no DNS
record pointing at the tunnel, auth.fuzefront.com no longer resolves to the
cluster (CF 1033/no-route). The catch-all tunnel ingress rule is unchanged,
so app.fuzefront.com (incl. the new /api/auth/idp/* path) keeps routing to
traefik.kube-system:80. No other *.fuzefront.com routes affected.

Closes #255

Co-authored-by: Israel Weinberg <99821070+izzywdev@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

terraform planterraform/contabo

Merging this PR applies exactly this saved plan (-out=tfplan). Review it as the apply approval.

Show plan
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  # cloudflare_record.vanity["auth"] will be destroyed
  # (because key ["auth"] is not in for_each map)
  - resource "cloudflare_record" "vanity" {
      - allow_overwrite = false -> null
      - created_on      = "2026-06-24T21:31:04.527639Z" -> null
      - hostname        = "auth.fuzefront.com" -> null
      - id              = "4bb3ef2cc1eb4cb0036a0e804a943f85" -> null
      - metadata        = {} -> null
      - modified_on     = "2026-06-24T21:31:04.527639Z" -> null
      - name            = "auth" -> null
      - proxiable       = true -> null
      - proxied         = true -> null
      - tags            = [] -> null
      - ttl             = 1 -> null
      - type            = "CNAME" -> null
      - value           = "8c0180f1-34d4-4c79-b1c0-7edfbc016376.cfargotunnel.com" -> null
      - zone_id         = "94eaf85fb0ed9a26b5645af10fed0788" -> null
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 0 to change, 1 to destroy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Drop the public auth.fuzefront.com CF-tunnel route (IdP host now reverse-proxied under app.fuzefront.com)

1 participant