From 0a79fc7884b4fc024f03ac7ffa19dcf9aaef13d0 Mon Sep 17 00:00:00 2001
From: josedario87 <jodarioel87@gmail.com>
Date: Sat, 1 Nov 2025 01:29:36 -0600
Subject: [PATCH] Fix: Usar variable MESH_AGENTS_DOMAIN para TCP passthrough
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Corregir sintaxis del label TCP que causaba error de interpolación
- Agregar variable MESH_AGENTS_DOMAIN al workflow
- Reemplazar bash parameter expansion por variable de entorno estándar
---
 .gitea/workflows/build-and-deploy.yml | 1 +
 docker-compose.yml                    | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build-and-deploy.yml b/.gitea/workflows/build-and-deploy.yml
index 880b6ec..675de34 100644
--- a/.gitea/workflows/build-and-deploy.yml
+++ b/.gitea/workflows/build-and-deploy.yml
@@ -10,6 +10,7 @@ jobs:
     env:
       APP_NAME: ${{ vars.APP_NAME }}
       APP_DOMAIN: ${{ vars.APP_DOMAIN }}
+      MESH_AGENTS_DOMAIN: ${{ vars.MESH_AGENTS_DOMAIN }}
       MESH_PORT: ${{ vars.MESH_PORT }}
       # Authentik OIDC configuration
       AUTHENTIK_ISSUER: ${{ vars.AUTHENTIK_ISSUER }}
diff --git a/docker-compose.yml b/docker-compose.yml
index afcc7ec..088b42a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -81,7 +81,7 @@ services:
       # y verán el certificado SSL de MeshCentral (no el de Traefik)
 
       # TCP Router - SNI routing para subdominio de agentes
-      - "traefik.tcp.routers.${APP_NAME}-agents-tcp.rule=HostSNI(`mesh-agents.${APP_DOMAIN#*.}`)"
+      - "traefik.tcp.routers.${APP_NAME}-agents-tcp.rule=HostSNI(`${MESH_AGENTS_DOMAIN}`)"
       - "traefik.tcp.routers.${APP_NAME}-agents-tcp.entrypoints=websecure"
       - "traefik.tcp.routers.${APP_NAME}-agents-tcp.tls.passthrough=true"
       - "traefik.tcp.routers.${APP_NAME}-agents-tcp.service=${APP_NAME}-tcp"