Skip to content

docs(deploy): add reverse proxy, TLS and upgrade guides - #317

Merged
BryanFRD merged 1 commit into
mainfrom
docs/self-hosting
Oct 11, 2026
Merged

BryanFRD merged 1 commit into
mainfrom
docs/self-hosting

Conversation

@BryanFRD

Copy link
Copy Markdown
Contributor

Closes #269

Adds docs/reverse-proxy-and-tls.md (TLS, proxy body and timeout settings, WebDAV methods, Windows WebClient Basic auth and file size limit, JWT_SECRET) and docs/upgrading.md (routine, downgrades, what releases changed for operators). The server now logs a warning at startup when JWT_SECRET is shorter than 32 characters. The chart README gains an ingress section.

… short JWT_SECRET

Signed-off-by: BryanFRD <bryanferrando59@gmail.com>
@BryanFRD
BryanFRD enabled auto-merge (squash) October 11, 2026 10:01

@ferrfleet ferrfleet Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nothing blocking. I checked the docs against the code: ingress.annotations is already rendered by templates/ingress.yaml and defaulted in values.yaml, the 8 MiB chunk size matches web/src/app/transfer.ts and crates/client/src/resumable.rs, and the chart's deployment uses Recreate.

Nit: api/src/main.rs already imports stashden_api::{..., config::Config, ...}. Changing that to config::{self, Config} lets the new check read config::jwt_secret_is_short(...) / config::MIN_JWT_SECRET_CHARS like the rest of the file, without the fully qualified paths.

@BryanFRD
BryanFRD merged commit a098ae9 into main Oct 11, 2026
9 checks passed
@BryanFRD
BryanFRD deleted the docs/self-hosting branch October 11, 2026 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs: TLS, reverse proxy and upgrades for self-hosters

1 participant