7eb8d756d1
Read all 62 source files (Dev: 37, Homelab: 22, Venture: 3, Reference: 0). Entity pages created (17): - Wiki/Reference: lovebug, jenny, sunnie, n8n, ob1, tailscale, authentik, traefik, cloudflare, obsidian, gitea, plant-based-southerner, claude-code, dispatch, docker - Wiki/Homelab: proxmox - Wiki/Dev: pbs-hub, herbydev Synthesis pages created (2): - Wiki/Homelab/homelab-ingress-stack — four-layer ingress model (Cloudflare + Traefik + Authentik + Tailscale); operational lessons from 10+ source files - Wiki/Dev/ai-memory-architecture — three memory layers (wiki + OB1 + Dispatch context); ingest paths; harness-vs-model design decision All 11 index pages rebuilt (Sources/Dev, Venture, Homelab, Reference, Sources root; Wiki/Dev, Venture, Homelab, Reference, Wiki root; vault root index.md). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2.4 KiB
2.4 KiB
| type | path | tags | created | updated | |||
|---|---|---|---|---|---|---|---|
| entity | Wiki/Reference |
|
2026-05-08 | 2026-05-08 |
Cloudflare
What it is
Cloudflare provides DNS, CDN caching, DDoS protection, and tunnel connectivity for PBS and homelab. All PBS traffic routes through Cloudflare before reaching the Linode origin server. Cloudflare Tunnel (formerly Argo Tunnel) is used to expose internal homelab services (MCP server, select homelab tools) to the internet without opening firewall ports on origin servers.
Current state
Active across multiple roles:
- DNS — authoritative DNS for PBS domain and
herbylab.dev - CDN caching — cache rules tuned for PBS WordPress; last-match-wins rule ordering; cookie-based bypass for logged-in users
- Bot Fight Mode — enabled (added during March 2026 server stability hardening)
- Cloudflare Tunnel — homelab MCP server at
mcp.herbylab.devexposed via tunnel (no open inbound port) - Cache warming — n8n daily sitemap crawl + cache purge pipeline (cloudflare-cache-warmer project)
- Cache bypass fix — cookie-based bypass ensures members see fresh content; n8n triggers purge on content publish
Where it lives
- Cloudflare managed service (cloud-hosted control plane)
cloudflaredtunnel daemon runs on homelab/PBS Docker host- n8n integration via Cloudflare API (cache purge webhook)
Related projects
- Sources/Dev/cloudflare-cache-rules — cache rule configuration session
- Sources/Dev/cloudflare-cache-strategy — cookie bypass + n8n purge strategy
- Sources/Dev/cloudflare-cache-warmer — daily cache warming
- Sources/Homelab/homelab-mcp-server — tunnel for MCP server
- Sources/Homelab/server-stability-and-security-hardening — Bot Fight Mode
- Wiki/Reference/traefik — origin ingress
- Wiki/Reference/n8n — cache purge automation
- Wiki/Homelab/homelab-ingress-stack — synthesis
History
- Ongoing — Core DNS + CDN layer for PBS
- 2026 — Cache rule last-match-wins ordering locked; cookie bypass implemented
- March 2026 — Bot Fight Mode enabled during server stability hardening
- 2026-05-06 — Cloudflare Tunnel deployed for MCP server at
mcp.herbylab.dev - Planned — Cache warming automation via n8n daily job