---
{
  "n": 112,
  "title": "fact 30 \u2014 The tunler server refuses TLS for any subdomain without a tunnel",
  "abstract": "",
  "refs": [],
  "seen": [
    "system",
    "agent"
  ],
  "data": {
    "feature": "facts",
    "session": "aa7b0113-6875-4844-9251-b121d8830cf3",
    "private": true,
    "whisper": true,
    "lead": false,
    "yields": true,
    "reply_kept": false
  },
  "created": 1791707547.521616,
  "updated": 1791707547.737312,
  "deleted": 0.0,
  "completed": 0.0,
  "outcome": "",
  "type": "nudge"
}
---
Seen 2026-10-04 in the server's docker logs (ssh root@tunler.jessegall.nl, container tunler): 'TLS handshake error ... host "journal-probe.tunler.jessegall.nl" not allowed'. A made-up subdomain never answers even when the server is healthy; probe https://tunler.jessegall.nl/ for the server itself. Root SSH to the server works.
