From cbdb12f7d57588bacf18a52f2bd2307fc1d54979 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sat, 31 Jan 2026 17:35:22 +0200
Subject: Fix minvid.f3s.buetow.org TLS certificate generation and routing

- acme.sh: Change grep from exact match to prefix match for f3s hosts
  Server blocks for f3s hosts use -port80/-port8080 suffixes

- relayd: Add explicit routing for f3s hosts (except registry/jellyfin)
  minvid and other f3s hosts now route to <f3s> backend table

Amp-Thread-ID: https://ampcode.com/threads/T-019c14ac-164f-776f-8648-471d4ac4ce5a
Co-authored-by: Amp <amp@ampcode.com>
---
 frontends/etc/relayd.conf.tpl | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'frontends/etc')

diff --git a/frontends/etc/relayd.conf.tpl b/frontends/etc/relayd.conf.tpl
index 5c53df3..8c33dcf 100644
--- a/frontends/etc/relayd.conf.tpl
+++ b/frontends/etc/relayd.conf.tpl
@@ -65,6 +65,7 @@ http protocol "https" {
 
     # For f3s hosts: use relay-level failover (f3s -> localhost backup)
     # Registry is special: needs explicit routing to port 30001
+    # Jellyfin uses NodePorts (bypasses Traefik)
     <% for my $host (@$f3s_hosts) {
           for my $prefix (@prefixes) {
               if ($host eq 'registry.f3s.buetow.org') {
@@ -73,6 +74,9 @@ http protocol "https" {
     <%         } elsif ($host eq 'jellyfin.f3s.buetow.org') {
     -%>
     match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s_jellyfin>
+    <%         } else {
+    -%>
+    match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s>
     <%         }
           }
     } -%>
-- 
cgit v1.2.3