(chore) add associate tasks

2026-08-18 20:41:34 -07:00
parent 3a03a6afb6
commit c42040319f
75 changed files with 909 additions and 236 deletions
@@ -0,0 +1,15 @@
+# 0.5 — Diagnose apex 403
+
+Phase: 0 — Unblock
+
+Depends on: [00-decisions.md](00-decisions.md) decision #2
+
+- [ ] Diagnose apex 403 — check Cloudflare tunnel Public Hostnames list and WAF event log
+
+Partial evidence (2026-08-18): `kubectl get ingress -A` has zero rules for bare host `riotpiao.com` — every ingress is a subdomain (22 hosts, all `*.riotpiao.com` per the `*.riotpiao.homelab.com` retirement). No in-cluster origin exists for the apex today. Leans toward "no origin configured" as the cause, but Cloudflare tunnel Public Hostnames list + WAF event log still needed to confirm the tunnel-side config (not visible from `kubectl`).
+
+## Verify
+
+```bash
+curl -sS -o /dev/null -w '%{http_code}\n' https://riotpiao.com   # 200
+```