Skip to content

feat: Claude via backend proxy + cloudflared CI - #21

Merged
surrealwolf merged 4 commits into
mainfrom
feat/claude-api-key-from-secret
Feb 2, 2026
Merged

feat: Claude via backend proxy + cloudflared CI#21
surrealwolf merged 4 commits into
mainfrom
feat/claude-api-key-from-secret

Conversation

@surrealwolf

Copy link
Copy Markdown
Collaborator

Claude backend proxy

  • Fetches /api/config to detect when backend has Claude key in k8s secret
  • ClaudeService.executeCommand(prompt, { useBackendKey: true }) when backend provides key
  • No API key in browser when using backend proxy

Cloudflared CI

  • Add publish-cloudflared job to build/push cloudflared-tunnel image
  • Add cloudflare/Dockerfile for tunnel image

Requires high-command-api PR for backend proxy and k8s route updates.

- Use /api/config to detect backend Claude (key in k8s secret)
- ClaudeService supports useBackendKey when backend has key
- Add publish-cloudflared job to GitLab CI
- Add cloudflare/Dockerfile for tunnel image
- Add API deployments, HTTPRoute, Gateway, tunnel manifests
- Add CLOUDFLARE_TUNNEL.md, api-secrets-example, gateway-tunnel-service
- Add cloudflare/ config (Caddy, docker-compose, setup-tunnel)
- Update k8s README for full stack
Use secretKeyRef for DATABASE_URL instead of inline credentials.
Rotate the exposed PostgreSQL password.
@surrealwolf
surrealwolf force-pushed the feat/claude-api-key-from-secret branch from 06e2114 to 714ce57 Compare February 2, 2026 07:42
- Remove ui-ingress.yaml (Gateway handles ingress, not nginx)
- Remove gateway-lb.yaml (doc only, Gateway uses Kube-VIP)
- Remove cloudflare local dev files (config, Caddy, docker-compose, setup-tunnel)
- Simplify cloudflare/README, k8s/README, CLOUDFLARE_TUNNEL.md
@surrealwolf
surrealwolf merged commit 7dc610c into main Feb 2, 2026
3 checks passed
@surrealwolf
surrealwolf deleted the feat/claude-api-key-from-secret branch February 2, 2026 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant