Skip to content

feat(dev2-site): render r4ck.dev and bittorrented.com vhosts from the kit - #113

Merged
ralyodio merged 1 commit into
masterfrom
fix/dev2-site-standalone-and-locations
Sep 28, 2026
Merged

ralyodio merged 1 commit into
masterfrom
fix/dev2-site-standalone-and-locations

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Lets the kit render the last two kit-owned vhosts, so they get the #112 proxy_buffer_size fix.

  • r4ck.dev: new nginx_locations key in sites.d (raw location blocks, __APP_PORT__ substituted, inserted before location /). The live ThreatCrush x402 paywall block for /api/v1/search moves into sites.d/r4ck.dev.json (with the buffer lines added), so a re-render keeps it.
  • bittorrented.com: site() falls back to a standalone sites.d/<site>.json whose site matches, and nginx_app: false renders only the proxies (app on a DO droplet, only supabase.bittorrented.com on dev2).
  • Proxy tuning factored into proxy_tuned().

Dry run (dev2-site loaded as a module with ssh stubbed, diffed against live dev2): 74 vhosts byte-identical, r4ck.dev and bittorrented.com differ only by the buffer lines.

🤖 Generated with Claude Code

… kit

Two vhosts could not be re-rendered, so they missed the proxy_buffer_size
fix (#112):

- r4ck.dev carries a hand-added ThreatCrush x402 paywall location that a
  re-render would delete. sites.d may now set nginx_locations (raw location
  blocks, __APP_PORT__ substituted), inserted ahead of the catch-all; the
  paywall block moves into sites.d/r4ck.dev.json.
- bittorrented.com is not a Railway site, so it has no sites.json row and
  `dev2-site vhost` died "unknown site". site() now falls back to a sites.d
  file that names itself, and nginx_app: false renders only the proxies
  (its app runs on a droplet; only supabase.bittorrented.com is here).

Proxy tuning moved into proxy_tuned(). Dry run against dev2: 74 vhosts
render byte-identical to live; these two differ only by the buffer lines.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

25 finding(s)

HIGH/CRITICAL: 4 | MEDIUM: 12 | LOW: 9

Severity Rule Location
HIGH sh-remote-script-execution root-ubuntu.sh:3236
HIGH sh-remote-script-execution root-ubuntu.sh:3237
HIGH sh-remote-script-execution root-ubuntu.sh:5071
HIGH sh-remote-script-execution root-ubuntu.sh:5075
MEDIUM sql-template-interpolation dev2/dev2-site:812
MEDIUM sql-template-interpolation dev2/dev2-site:889
MEDIUM sh-remote-script-execution root-ubuntu.sh:5248
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/emoji.ts:167
MEDIUM redos-nested-quantifier src/icon.ts:166
MEDIUM redos-nested-quantifier src/mail.ts:1042
MEDIUM sql-template-interpolation src/users-dump.ts:487
MEDIUM sql-string-concatenation src/users-dump.ts:507
MEDIUM sql-template-interpolation src/users-dump.ts:540
MEDIUM sql-string-concatenation src/users-dump.ts:574
MEDIUM redos-nested-quantifier src/wcag.ts:556
LOW secret-generic-credential src/credentials.ts:36
LOW secret-generic-credential src/user-export.ts:632
LOW secret-generic-credential src/user-export.ts:638
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:141
LOW secret-generic-credential test/shorten.test.ts:36
LOW secret-database-url test/users-dump.test.ts:108
LOW secret-database-url test/users-dump.test.ts:119
LOW secret-database-url test/users-dump.test.ts:120

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 0935b99 into master Sep 28, 2026
5 checks passed
@ralyodio
ralyodio deleted the fix/dev2-site-standalone-and-locations branch September 28, 2026 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant