docs: canonical LAN-endpoints map (issue #6) #12

Open
adam wants to merge 1 commit from docs/lan-endpoints into main
Owner

Closes the documentation half of issue #6.

What

Adds docs/reference/lan-endpoints.md — one canonical service→address map across three contexts (LAN host IP · container-to-container hostname:internal-port · public browser URL), plus which services have no public route and the published-vs-internal port gotcha. Wired into CLAUDE.md Networking and the skills README.

Reality check (the interesting part)

#6 was filed P1 to kill the Pangolin-SSO hang on public *.adamayala.work URLs. Measured 2026-07-12 — the hang no longer reproduces for Forgejo: public git smart-HTTP, browser, and authed-API requests all return 200 with no SSO redirect (~0.2s). The June token/auth bypass looks applied.

So the doc is framed around the rationale that is actually still true — LAN is faster (~0.008s vs ~0.2s) and independent of the tunnel being up — not a broken public path. Yesterday's Dockhand clone hang was real but its cause is no longer present.

Deferred

Split-horizon DNS (a local resolver returning LAN IPs for *.adamayala.work) is the durable upgrade but is now optional, not a fix — no DNS resolver runs on Unraid today. Left as a low-priority follow-up on #6.

🤖 Generated with Claude Code

Closes the documentation half of issue #6. ## What Adds `docs/reference/lan-endpoints.md` — one canonical service→address map across three contexts (LAN host IP · container-to-container `hostname:internal-port` · public browser URL), plus which services have no public route and the published-vs-internal port gotcha. Wired into CLAUDE.md Networking and the skills README. ## Reality check (the interesting part) #6 was filed P1 to kill the Pangolin-SSO hang on public `*.adamayala.work` URLs. **Measured 2026-07-12 — the hang no longer reproduces for Forgejo:** public git smart-HTTP, browser, and authed-API requests all return 200 with no SSO redirect (~0.2s). The June token/auth bypass looks applied. So the doc is framed around the rationale that is *actually* still true — LAN is faster (~0.008s vs ~0.2s) and independent of the tunnel being up — not a broken public path. Yesterday's Dockhand clone hang was real but its cause is no longer present. ## Deferred Split-horizon DNS (a local resolver returning LAN IPs for `*.adamayala.work`) is the durable upgrade but is now optional, not a fix — no DNS resolver runs on Unraid today. Left as a low-priority follow-up on #6. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Consolidates service -> address across three contexts (LAN host IP /
container-to-container hostname:internal-port / public browser URL) so
in-lab automation defaults to the direct, tunnel-independent path.

Reframes the "public URL hangs on Pangolin SSO" premise: measured
2026-07-12, the hang no longer reproduces for Forgejo (git/browser/API
all 200, no redirect). Rationale is now speed + tunnel-independence, not
a broken public path. Split-horizon DNS left as a deferred upgrade.

Wires the reference into CLAUDE.md Networking and the skills README.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin docs/lan-endpoints:docs/lan-endpoints
git switch docs/lan-endpoints

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff docs/lan-endpoints
git switch docs/lan-endpoints
git rebase main
git switch main
git merge --ff-only docs/lan-endpoints
git switch docs/lan-endpoints
git rebase main
git switch main
git merge --no-ff docs/lan-endpoints
git switch main
git merge --squash docs/lan-endpoints
git switch main
git merge --ff-only docs/lan-endpoints
git switch main
git merge docs/lan-endpoints
git push origin main
Sign in to join this conversation.
No reviewers
No labels
lab-honing
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
adam/foundry!12
No description provided.