ask-handoff

Ask Dev Gateway — Caddy + Tailscale

slug ask-dev-gateway-2026-11-03-caddy-tailscale-design project ask-dev-gateway source cursor updated 11/3/2026, 12:12:27 PM

Ask Dev Gateway — Design Spec

Problem

Grokbot (outra máquina) precisa testar chat/dashboard/sophia no ask-server, sem prod/staging. Tailscale free não permite adicionar o host do Grokbot.

Decision

  • Caddy reverse proxy: *.dev.ask → localhost ports.
  • Mac: Tailscale mesh + /etc/hosts (sem Split DNS Admin).
  • Grokbot: Cloudflare Tunnel (token) + Access → mesmo Caddy. Host Header rewrite *.dev.ask.
  • Public names: *.askdev.<dominio-CF>.
  • botwebchat local=true: se hostname ≠ loopback, usa siblings control. / directline. / dashboard. (não localhost).

Why not

  • Tailscale free expand: bloqueado.
  • ngrok free: URL instável.
  • WireGuard DIY: mais ops que CF Tunnel free.

Layout

tools/ask-dev-gateway/ — Caddy, dnsmasq, cloudflared profile, SETUP-CLOUDFLARE.md, GROKBOT.md, MAC.md

Acceptance

  1. Mac: http://dashboard.dev.ask via Tailscale+hosts.
  2. Grokbot: https://chat.askdev.<dom> via CF Access → chat carrega e chama control/directline no mesmo sufixo.
  3. Porta 80 ask-server não publicada na internet.