1# Edge relay for the forge on slate (see deploy/slate). No state, no volume.2# fly secrets set TAILCAT_CLIENT_KEY="$(cat edge.private.json)" FORGE_TAILCAT_ADDR=tc...3# fly deploy4# fly ips allocate-v6 && fly ips allocate-v4 # dedicated IPv4: raw TCP on :225# fly certs add src.rest && fly certs add pages.src.rest6# While slate is down, pages come from the R2 mirror (Caddyfile): set7# FORGE_MIRROR_URL below to the mirror bucket's public URL. ssh just fails.8# With fly secrets set FORGE_MIRROR_TOKEN=..., the edge sends that as9# X-Forge-Mirror-Token to the bucket, so a WAF rule there can refuse10# requests without it.11app = "dami-forge"12primary_region = "dfw"1314[env]15 FORGE_DOMAIN = "src.rest"16 FORGE_MIRROR_URL = "https://mirror.src.rest"1718# git over ssh, passed through as raw TCP.19[[services]]20 protocol = "tcp"21 internal_port = 222222 auto_stop_machines = "off"23 auto_start_machines = true24 min_machines_running = 12526 [[services.ports]]27 port = 222829# Pages, sites, and https clones. Fly terminates TLS.30[[services]]31 protocol = "tcp"32 internal_port = 808033 auto_stop_machines = "off"34 auto_start_machines = true35 min_machines_running = 13637 [[services.ports]]38 port = 8039 handlers = ["http"]40 force_https = true4142 [[services.ports]]43 port = 44344 handlers = ["tls", "http"]4546[[vm]]47 size = "shared-cpu-1x"48 memory = "256mb"