ADR: Cloudflare CDN as Reverse Proxy for GitHub Pages
Decision record for using Cloudflare as a CDN reverse proxy in front of GitHub Pages for chrisnewcomb.name.
Decision record for using Cloudflare as a CDN reverse proxy in front of GitHub Pages for chrisnewcomb.name.
Deploying Caddy as a reverse proxy on fablehaven to terminate TLS for Pi-hole admin UIs across the three-node cluster, using Step-CA certs and internal DNS.
Building IoT network isolation on TheBurrow — VLAN 94 design, Kea DHCP subnet activation, OPNsense firewall rules, DNS enforcement NAT redirects, and migrating 31 devices via CSV import.
A compound failure across three bugs left Pi-hole VRRP failover silently broken for weeks — no keepalived on mistborn, wrong VIP ownership, and Kea serving raw IPs instead of VIPs.
Deploying Step-CA as a systemd service on fablehaven, configuring a JWK provisioner, and issuing TLS certificates fleet-wide via Ansible roles.