aneurinandClaude Opus 5.5
3eec79fa44
The builder stage cross-compiles Caddy for the target platform, so no emulation is needed. The module check runs against the amd64 image; PR checks also build arm64. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
caddy-desec-docker
Stock Caddy plus the
caddy-dns/desec module, so Caddy can
get certificates by ACME DNS-01 against a zone hosted at
deSEC. Published as
code.aneur.in/cloud/caddy-desec-docker:latest (linux/amd64, linux/arm64).
Used by the llm stack in cloud/cloud
for *.llm.aneur.in:
{
acme_dns desec {
token {env.DESEC_TOKEN}
}
}
Builds
- Push to
main, weekly, or by hand (build.yml): builds the image, checks the deSEC module is present, then pushes:latest, keeping the previous one as:previous. The weekly run picks up new Caddy and module releases without a commit. - Pull requests (
pr-checks.yml): the same build and module check, without pushing.
The push uses the BUILD_API_TOKEN Actions secret, a Gitea token with
package write access.