orchard
mirrorEvery site I host, in one repo, along with the Cloudflare Tunnel and Caddy that front them. It's all Go, Vite, and SQLite, and it runs on a desktop at home with nothing listening on an inbound port.
blogbuncaddycloudflare-tunneldockergogolanghomelabhtml-templatemonorepoself-hostedseosqlitestatic-sitetypstuptime-monitoringviteweb-analytics
1# `make env` from the repo root turns this into a .env. Compose reads that .env
2# from the project directory on its own, so
3# nothing has to be exported in the shell or forwarded through the Makefile.
4#
5# .env is gitignored by bare name at any depth. This is a public repository:
6# verify with `git check-ignore -v sites/repos.bythewood.me/.env`.
7
8# There is no password here any more. Signing in happens on auth.bythewood.me,
9# which pushes a code to a phone, and this site asks that one whether the cookie
10# in a request is a live session. Push tokens for the git wire are unaffected:
11# git cannot answer a code prompt, so those stay in this site's own database.
12
13# Set to 0 to turn off the GitHub mirror lane. Useful for a dev run that should
14# not clone 250MB before it serves a page. Anything else, including unset,
15# leaves it on.
16REPOS_MIRROR=