I moved a staging environment off the cloud in one evening

说明与用途

将 Assemblyl 的测试环境从云迁移到家庭 Proxmox 集群，仅用一晚完成：使用扁平化租户命名空间、单个通配符证书、Traefik 路由和 Cloudflare Tunnel，消除每月费用。

问题

Staging ran on paid cloud services, incurring unnecessary monthly costs while a self-hosted homelab existed.

结果

Migrated staging to a self-hosted environment in ~50 minutes, eliminating monthly cloud costs and simplifying tenant routing with a single wildcard certificate.

工作流

• 1. Flatten tenant namespace to {tenant}-as.example.com to keep wildcard one level deep.
• 2. Create per-tenant DNS records via API.
• 3. Configure Traefik with a HostRegexp rule matching tenant names and a single wildcard certificate.
• 4. Enable passHostHeader to preserve tenant host header.
• 5. Pre-warm certificate by curling a non-existent tenant name to trigger DNS challenge.
• 6. Deploy four services to self-hosted platform layer, each pointing to a monorepo directory.
• 7. Move CI to a self-hosted runner on the same cluster.
• 8. Verify public access via Cloudflare Tunnel without port forwarding.

证据

The complication was that staging had to stay multi-tenant. Every tenant gets their own subdomain.

来源

The fix was to flatten the namespace Keep the wildcard one level deep by moving the tenant name into the label rather than in front of it: {tenant}-as.example.com

来源

Four applications on the self-hosted platform layer, each pointing at a different directory of the same monorepo, each with its own domain and its own build. All four went from "create application" to serving in about fifty minutes.

来源