Portal hostname cutover¶
How portal.alanredfordhayes.ai was pointed at Harness (pattern to mirror for docs.).
DNS (Terraform on astra)¶
| Item | Value |
|---|---|
| Path | /opt/terraform/cloudflare-alanredfordhayes |
| Provider | cloudflare/cloudflare ~> 5.25 (cloudflare_dns_record) |
| Secrets | /root/.secrets/cloudflare.env mode 600 — do not commit or paste |
| Record shape | portal A → VPS IPv4, DNS-only (proxied = false) |
cd /opt/terraform/cloudflare-alanredfordhayes
set -a; source /root/.secrets/cloudflare.env; set +a
terraform plan && terraform apply
nginx + TLS¶
- Shared LE cert name
alanredfordhayes.ai(SANs include apex, www, git, portal; docs added for this site). harness.conf:portal.→127.0.0.1:3000;git.→ 301 portal.
Client DNS caveat¶
Public CF DNS can be correct while a home router (e.g. GL.iNet) returns empty A for a new name. Workaround: query 1.1.1.1 or temporary /etc/hosts.
Source wiki: ~/agent-wiki/concepts/vps-astra-harness-portal-cutover.md · culled 2026-09-16