Pages apex: on-demand cert and redirect to the forge !47

merged merged by cmc on 2026-08-25 17:05 UTC · krz/gitbay:pages-apex into main

3 files changed, +12 −1

Layout: unified · split

cmd/gitbayd/main.go +3

 							return nil
 						}
 						if pd := cfg.Pages.Domain; pd != "" {
+							if h == pd {
+								return nil // apex: serves a redirect to the forge
+							}
 							if owner, ok := strings.CutSuffix(h, "."+pd); ok &&
 								!strings.Contains(owner, ".") && st.OwnerExists(owner) {
 								return nil

e2e/pages_test.go +4 −1

 	for _, tc := range []struct{ host, path string }{
 		{"alice.p.test", "/secret/"},
 		{"bob.p.test", "/"},
-		{"p.test", "/"},
 	} {
 		if resp, _ = inst.pagesGet(t, tc.host, tc.path); resp.StatusCode != 404 {
 			t.Fatalf("%s%s: %d, want 404", tc.host, tc.path, resp.StatusCode)
 		}
 	}
+	// The apex redirects to the forge.
+	if resp, _ = inst.pagesGet(t, "p.test", "/"); resp.StatusCode != 302 || !strings.Contains(resp.Header.Get("Location"), "gitbay.test") {
+		t.Fatalf("apex: %d -> %s", resp.StatusCode, resp.Header.Get("Location"))
+	}
 	// The forge itself still answers on its own host.
 	if status, _ := inst.get(t, "/explore"); status != 200 {

internal/httpd/pages.go +5

 		http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
 		return
 	}
+	// The apex has no site of its own; send visitors to the forge.
+	if host == s.cfg.Pages.Domain {
+		http.Redirect(w, r, s.cfg.Server.SiteURL, http.StatusFound)
+		return
+	}
 	owner, ok := strings.CutSuffix(host, "."+s.cfg.Pages.Domain)
 	if !ok || owner == "" || strings.Contains(owner, ".") {
 		http.NotFound(w, r)