Production readiness — Section 6: DNS, Domain, and TLS

0 Anchors

— Blast radius

— Churn 30d

0 Proposals

Finding: DNS is actually hosted at Cloudflare (verified via live dig NS musehub.ai), not Namecheap as docs/infrastructure.md previously claimed (now corrected). Namecheap is registrar only.

Open: canonical hostname decision (root vs www), no redirect currently implemented between them. Recommend staying on Cloudflare DNS rather than migrating to Route 53, given Cloudflare already handles edge proxy/TLS/object storage.

◎ Activity1

●

gabriel opened this issue 23 days ago

○

gabriel 6 days ago

Update 2026-08-25: Done. Canonical hostname decided (musehub.ai apex, matching the github.com/www.github.com precedent); www.musehub.ai now 301-redirects to it via a Cloudflare Redirect Rule, and HTTP now 301-redirects to HTTPS the same way (both verified live, including query-string preservation and the combined http+www double-hop case).

Production got its own dedicated Cloudflare Origin Certificate (RSA 2048, 15-year validity, musehub.ai + *.musehub.ai) rather than reusing/hunting for the original staging-era key, which was never confirmed saved anywhere retrievable. TLS verified end-to-end on the production origin (issuer: CloudFlare Origin SSL Certificate Authority).

Remained on Cloudflare DNS per this ticket's recommendation rather than migrating to Route 53.

Closing.

✓

closed this issue 6 days ago

Assignee

○ unassigned

Release

no commits linked to this issue

create

muse hub issue create \
  --title "..." \
  --body "..." \
  --label bug \
  --anchor path/to/file.py::Symbol \
  --commit-anchor <sha> \
  --repo gabriel/musehub

read

muse hub issue get 155 --json
muse hub issue list --state open --json

update

muse hub issue edit 155 \
  --anchor path/to/file.py::Symbol \
  --repo gabriel/musehub

comment

muse hub issue comment 155 \
  --body "Fixed in <sha>" \
  --repo gabriel/musehub

reopen

muse hub issue reopen 155 \
  --repo gabriel/musehub

create

create_issue({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  title: "...",
  body: "...",
  labels: ["bug"],
  symbol_anchors: [
    "path/to/file.py::Symbol"
  ],
  commit_anchors: ["<sha>"]
})

read

get_issue({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  issue_number: 155
})

list_issues({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  state: "open"
})

update

edit_issue({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  issue_number: 155,
  symbol_anchors: ["path/to/file.py::Symbol"]
})

comment

create_issue_comment({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  issue_number: 155,
  body: "..."
})

reopen

reopen_issue({
  repo_id: "sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75",
  issue_number: 155
})

create

curl -X POST \
  http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues \
  -H "Content-Type: application/json" \
  -H "Authorization: MSign handle=\"...\" ts=... sig=\"...\"" \
  -d '{
    "title": "...",
    "body": "...",
    "labels": ["bug"],
    "symbol_anchors": ["path/to/file.py::Symbol"]
  }'

read

# get one issue
curl http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues/155

# list open issues
curl "http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues?state=open"

update

curl -X PATCH \
  http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues/155 \
  -H "Content-Type: application/json" \
  -H "Authorization: MSign handle=\"...\" ts=... sig=\"...\"" \
  -d '{"title": "...", "body": "..."}'

comment

curl -X POST \
  http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues/155/comments \
  -H "Content-Type: application/json" \
  -H "Authorization: MSign handle=\"...\" ts=... sig=\"...\"" \
  -d '{"body": "Fixed in <sha>"}'

reopen

curl -X POST \
  http://localhost:10003/api/repos/sha256:a265796360c3b1b8700b5682ced5f6b044a2c0d3a2c58918892a5aa494db6c75/issues/155/reopen \
  -H "Authorization: MSign handle=\"...\" ts=... sig=\"...\""