Hostnames
| Hostname | Purpose |
|---|---|
| ai.nutsnews.com | Existing production AI API |
| localserver.ramideltoro.com | Machine-authenticated deployment SSH |
| observe.ramideltoro.com | Public portal and authenticated owner routes |
| localserver.wiki.ramideltoro.com | Independent GitHub Pages wiki |
SSH
The GitHub runner uses cloudflared as an SSH ProxyCommand. A dedicated Access service token authenticates the tunnel connection, and an SSH key authenticates to the host. Host-key verification remains enabled.
Owner routes
The Node backend protects /owner and /api/owner with a secure Google-authenticated owner session. Cloudflare Access must not intercept these portal paths. Public responses use a fixed allowlist and contain no raw operational logs.