dash 3.2.1 → 4.0.1

data/lib/dash/configuration/docs/proxy.yml

@@ -1,6 +1,6 @@
 # Proxy
 #
-# Kamal uses [kamal-proxy](https://github.com/basecamp/kamal-proxy) to provide
+# Kamal uses [dash-proxy](https://github.com/basecamp/dash-proxy) to provide
 # gapless deployments. It runs on ports 80 and 443 and forwards requests to the
 # application container.
 #
@@ -74,13 +74,13 @@ proxy:
   # Sharing one loadbalancer between several dash apps
   #
   # More than one dash app may point `loadbalancer:` at the same host. Each app
-  # registers its own service on the shared kamal-proxy and keeps its own
+  # registers its own service on the shared dash-proxy and keeps its own
   # deploy.yml; the load balancer multiplexes them by hostname.
   #
   # The rules dash enforces for that topology:
   #
-  # * Service state survives a reboot. kamal-proxy persists its services in the
-  #   `kamal-loadbalancer-config` volume (or `kamal-proxy-config` when the
+  # * Service state survives a reboot. dash-proxy persists its services in the
+  #   `dash-loadbalancer-config` volume (or `dash-proxy-config` when the
   #   loadbalancer shares a proxy host), and `dash proxy reboot` only replaces
   #   the container. Rebooting from app A does not drop app B's routes — the
   #   surviving service list is printed after the restart.
@@ -104,7 +104,7 @@ proxy:
 
   # Automatic proxy reboot on deploy
   #
-  # When `dash deploy` detects that the running kamal-proxy container was
+  # When `dash deploy` detects that the running dash-proxy container was
   # started with a different image, version or run options than the current
   # configuration, it reboots the proxy automatically — one host at a time —
   # before booting the app.
@@ -126,13 +126,13 @@ proxy:
 
   # SSL
   #
-  # kamal-proxy can provide automatic HTTPS for your application via Let's Encrypt.
+  # dash-proxy can provide automatic HTTPS for your application via Let's Encrypt.
   #
   # This requires that we are deploying to one server and the host option is set.
   # The host value must point to the server we are deploying to, and port 443 must be
   # open for the Let's Encrypt challenge to succeed.
   #
-  # If you set `ssl` to `true`, `kamal-proxy` will stop forwarding headers to your app,
+  # If you set `ssl` to `true`, `dash-proxy` will stop forwarding headers to your app,
   # unless you explicitly set `forward_headers: true`
   #
   # Defaults to `false`:
@@ -156,7 +156,7 @@ proxy:
   # absolute http(s) URL is called directly. Answer 2xx to approve. On-demand TLS
   # replaces the static hostname list, so it cannot be combined with
   # `host`/`hosts`, with `certificate_pem`, or with `ssl_domains` — dash rejects
-  # those at config time, because kamal-proxy would reject the deploy and there
+  # those at config time, because dash-proxy would reject the deploy and there
   # is no sensible winner to pick.
   #
   # `client_ca_pem` requires mutual TLS: clients must present a certificate
@@ -176,7 +176,7 @@ proxy:
 
   # SSL redirect
   #
-  # By default, kamal-proxy will redirect all HTTP requests to HTTPS when SSL is enabled.
+  # By default, dash-proxy will redirect all HTTP requests to HTTPS when SSL is enabled.
   # If you prefer that HTTP traffic is passed through to your application (along with
   # HTTPS traffic), you can disable this redirect by setting `ssl_redirect: false`:
   ssl_redirect: false
@@ -244,7 +244,7 @@ proxy:
   #
   # If you are behind a trusted proxy, you can set this to `true` to forward the headers.
   #
-  # By default, kamal-proxy will not forward the headers if the `ssl` option is set to `true`, and
+  # By default, dash-proxy will not forward the headers if the `ssl` option is set to `true`, and
   # will forward them if it is set to `false`.
   forward_headers: true
 
@@ -278,7 +278,7 @@ proxy:
       set:
         Strict-Transport-Security: max-age=31536000
       add:
-        X-Served-By: kamal-proxy
+        X-Served-By: dash-proxy
       remove:
         - Server
 
@@ -329,7 +329,7 @@ proxy:
   #
   # Authentication tokens live in the PROXY's environment, not the app's: polls
   # send `KAMAL_PROXY_REDIRECTS_TOKEN` as a bearer token when set, and
-  # `POST /.kamal-proxy/redirects/refresh` nudges an immediate re-poll when
+  # `POST /.dash-proxy/redirects/refresh` nudges an immediate re-poll when
   # authenticated with `KAMAL_PROXY_REFRESH_TOKEN`. Set both via
   # `proxy.run.options.env`, next to `KAMAL_PROXY_DOMAINS_TOKEN` — never as
   # deploy flags, which leak into process listings and audit logs.
@@ -397,19 +397,19 @@ proxy:
     password_secret: WEB_BASIC_AUTH_PASSWORD
   #
   # ### Notes
-  # - Requires a kamal-proxy that supports `--basic-auth`. This is newer than
+  # - Requires a dash-proxy that supports `--basic-auth`. This is newer than
   #   the current `MINIMUM_VERSION`, so make sure your proxy is up to date
   #   before enabling it — an older proxy fails the deploy on an unknown flag.
   # - Basic credentials are replayable and are sent on every request. Use this
   #   with `ssl: true`, or terminate TLS in front of the proxy.
-  # - kamal-proxy removes the `Authorization` header before forwarding, so a
+  # - dash-proxy removes the `Authorization` header before forwarding, so a
   #   service behind basic auth cannot also pass credentials through to its
   #   target. When load balancing, the credentials are enforced by the load
   #   balancer only.
 
   # Dynamic TLS domains
   #
-  # kamal-proxy can learn TLS hostnames from your application at runtime
+  # dash-proxy can learn TLS hostnames from your application at runtime
   # instead of fixing them at deploy time. It polls `source` — a path
   # (resolved against a healthy app target) or an absolute http(s) URL —
   # for the domain list and manages Let's Encrypt certificates for it
@@ -434,21 +434,21 @@ proxy:
   # Who the client is
   #
   # Rate limiting and IP allow lists are both only as correct as the address they
-  # key on, so configure this first if anything sits in front of kamal-proxy.
+  # key on, so configure this first if anything sits in front of dash-proxy.
   #
   # With no `trusted_proxies`, the client is always the address that opened the
   # connection — nothing a client sends can influence it, which is what makes the
   # allow list meaningful.
   #
   # Once you declare `trusted_proxies`, and only when the connecting address is
-  # one of them, kamal-proxy reads the forwarded chain instead: it walks the
+  # one of them, dash-proxy reads the forwarded chain instead: it walks the
   # chain from the nearest hop backwards past every proxy you declared, and the
   # first address none of your proxies wrote is the client. **List every hop**,
-  # not only the one that connects to kamal-proxy — a chain it cannot resolve
+  # not only the one that connects to dash-proxy — a chain it cannot resolve
   # denies the request rather than falling back to the connecting address.
   #
   # `header` names the header carrying the original client IP (`CF-Connecting-IP`
-  # behind Cloudflare, `True-Client-IP` behind some others); kamal-proxy reads it
+  # behind Cloudflare, `True-Client-IP` behind some others); dash-proxy reads it
   # instead of `X-Forwarded-For`. It is only honoured when `trusted_proxies` is
   # set, because otherwise it is just something the client wrote — dash rejects
   # that combination rather than appearing to honour it.
@@ -501,7 +501,7 @@ proxy:
   #
   # Refuse requests whose full User-Agent matches one of these RE2 patterns,
   # checked after the IP rules. A missing User-Agent only matches an explicit
-  # '^$' pattern. Patterns are matched by kamal-proxy (Go RE2), so dash checks
+  # '^$' pattern. Patterns are matched by dash-proxy (Go RE2), so dash checks
   # only their shape, not their syntax.
   deny_user_agents:
     - 'BadBot/.*'
@@ -661,7 +661,7 @@ proxy:
   # This block is the *policy*, and it is per service. Where the entries live is
   # proxy-wide and set under `run/cache` below.
   #
-  # Only `enabled` is required. Everything else keeps kamal-proxy's own default
+  # Only `enabled` is required. Everything else keeps dash-proxy's own default
   # until you set it.
   #
   # `max_ttl` caps the lifetime the app asks for, in seconds, so one mistaken
@@ -690,7 +690,7 @@ proxy:
   # ### When it is not caching
   #
   # A cache that quietly stores nothing is the usual first surprise. Start with
-  # `dash proxy cache stats`; kamal-proxy also explains every refusal — check
+  # `dash proxy cache stats`; dash-proxy also explains every refusal — check
   # `dash proxy logs` for the reason, and the `cache_refusals_total` metric
   # (by `reason`) if you run with `metrics_port`.
   # The common reasons are a missing `Cache-Control: public, max-age=...` on the
@@ -739,7 +739,7 @@ proxy:
 
   # Read-only targets
   #
-  # kamal-proxy can split traffic between the deployed (writer) targets and a
+  # dash-proxy can split traffic between the deployed (writer) targets and a
   # set of read-only targets, e.g. app instances backed by database replicas.
   # Read requests are routed to the read targets; write requests always go to
   # the writers.
@@ -771,7 +771,7 @@ proxy:
   # re-pinned, so a deploy does not strand anybody. Reads served by a
   # `read_targets` replica are never pinned.
   #
-  # `cookie` renames the pin cookie; kamal-proxy picks a sensible default.
+  # `cookie` renames the pin cookie; dash-proxy picks a sensible default.
   session_affinity:
     enabled: true
     cookie: _kamal_affinity
@@ -827,19 +827,19 @@ proxy:
     publish: false                 # Publish ports to the host (default: true)
     bind_ips:                      # List of IPs to bind to when publishing ports
       - 0.0.0.0
-    registry: registry:4443        # Extra registry prefix for the kamal-proxy image
+    registry: registry:4443        # Extra registry prefix for the dash-proxy image
                                    # (default: none). If you set this, also override
                                    # `repository` to a host-less path (e.g.
-                                   # myfork/kamal-proxy) - the default repository
+                                   # myfork/dash-proxy) - the default repository
                                    # below already embeds its ghcr.io host
     repository: ghcr.io/zoolutions/dash-proxy # Container repository for the
-                                   # kamal-proxy image (this is the default)
-    version: v1.0.0.7              # Version tag of the kamal-proxy image to use.
+                                   # dash-proxy image (this is the default)
+    version: v1.1.0.0              # Version tag of the dash-proxy image to use.
                                    # Defaults to the minimum version this gem
                                    # requires - only pin it to roll forward early,
                                    # never below the default
     port_holder: true              # Zero-downtime proxy reboots (default: false).
-                                   # Runs a minimal long-lived kamal-proxy-net container that
+                                   # Runs a minimal long-lived dash-proxy-net container that
                                    # owns the published ports; proxy generations join its
                                    # network namespace and overlap during a reboot, so config
                                    # and version changes apply without dropping requests.
@@ -857,7 +857,7 @@ proxy:
     # DNS-01 on their own. `auto` is an explicit opt-in that picks the provider
     # from the credentials it can see and logs at boot which one it armed;
     # `none` says "no DNS-01" explicitly. An unsupported name is rejected here,
-    # at config time - kamal-proxy would only log a warning and then never
+    # at config time - dash-proxy would only log a warning and then never
     # issue a certificate.
     #
     # A plain string (`dns_provider: cloudflare`) uses one provider for every
@@ -866,7 +866,7 @@ proxy:
     # spread across registrars. Each provider's API credentials must be present
     # under `credentials` for its challenges to succeed.
     #
-    # kamal-proxy also accepts short aliases for the canonical names - `cf`
+    # dash-proxy also accepts short aliases for the canonical names - `cf`
     # (cloudflare), `do` (digitalocean), `gcp`/`google`/`googledns` (gcloud),
     # `gd` (godaddy), `hz` (hetzner), `nc` (namecheap), `aws`/`r53` (route53)
     # and `vr` (vultr). Prefer the canonical name; the aliases exist so a
@@ -1018,15 +1018,15 @@ proxy:
     # Defaults to false:
     reuse_port: true
 
-    # Escape hatch for `kamal-proxy run`
+    # Escape hatch for `dash-proxy run`
     #
-    # Anything kamal-proxy accepts that has no key above. Note the difference
+    # Anything dash-proxy accepts that has no key above. Note the difference
     # from `options` below, which many people expect to do this: `flags` goes to
-    # `kamal-proxy run`, `options` goes to `docker run`.
+    # `dash-proxy run`, `options` goes to `docker run`.
     #
     # `true` renders a bare flag; anything else renders `--flag value`. No
     # translation is applied, so write Go durations and lists the way
-    # kamal-proxy wants them.
+    # dash-proxy wants them.
     #
     # A key here that a named setting already emits is rejected rather than
     # passed twice — set one or the other.
@@ -1037,7 +1037,7 @@ proxy:
     #
     # Path to the container runtime socket, which is what `proxy/sleep` needs in
     # order to stop and start containers. Setting it does two things: it passes
-    # the path to kamal-proxy, and it mounts that path into the proxy container,
+    # the path to dash-proxy, and it mounts that path into the proxy container,
     # since the flag alone only says where to look.
     #
     # **Reaching this socket is root-equivalent on the host.** It is a separate,
@@ -1073,11 +1073,11 @@ proxy:
       store_timeout: 2
       memory_size: 134_217_728
     # `options` are `docker run` options for the proxy container - resource
-    # limits, labels, extra mounts - NOT kamal-proxy flags. A kamal-proxy flag
+    # limits, labels, extra mounts - NOT dash-proxy flags. A dash-proxy flag
     # the gem has no key for goes in `flags` above instead.
     options:                       # Additional options to pass to `docker run`
       label:
-        - custom.label=kamal-proxy
+        - custom.label=dash-proxy
       memory: 512m
       cpus: 0.5
 

data/lib/dash/configuration/loadbalancer.rb

@@ -1,6 +1,6 @@
 class Dash::Configuration::Loadbalancer < Dash::Configuration::Proxy
   CONTAINER_NAME = "load-balancer".freeze
-  SHARED_CONTAINER_NAME = "kamal-proxy".freeze
+  SHARED_CONTAINER_NAME = "dash-proxy".freeze
 
   def self.validation_config_key
     "proxy"
@@ -34,7 +34,7 @@ class Dash::Configuration::Loadbalancer < Dash::Configuration::Proxy
     File.join config.run_directory, "loadbalancer"
   end
 
-  # The load balancer is a kamal-proxy container, so proxy/run applies to it
+  # The load balancer is a dash-proxy container, so proxy/run applies to it
   # exactly as it does to the per-host proxies. Without a run block it still
   # needs the default surface (published ports, log rotation, the apps-config
   # mount and the run command) to boot from, so fall back to an empty config

data/lib/dash/configuration/proxy/acme.rb

@@ -1,7 +1,7 @@
-# ACME configuration for the kamal-proxy container, including the DNS-01
+# ACME configuration for the dash-proxy container, including the DNS-01
 # challenge credentials.
 #
-# Everything here except the credentials becomes a `kamal-proxy run` flag, so it
+# Everything here except the credentials becomes a `dash-proxy run` flag, so it
 # lands in the run command and therefore in Proxy::Run#config_digest — changing
 # the block reboots the proxy on the next deploy.
 #
@@ -9,14 +9,14 @@
 # API token can rewrite your zone; `docker run --env TOKEN=...` would put it in
 # the host's process listing and in kamal's own audit log.
 class Dash::Configuration::Proxy::Acme
-  # The canonical provider names kamal-proxy MINIMUM_VERSION advertises. Kept in
+  # The canonical provider names dash-proxy MINIMUM_VERSION advertises. Kept in
   # step with the proxy by test/proxy_flag_coverage_test.rb, which compares this
   # list against the manifest bin/sync-proxy-flags generates from the image.
   DNS_PROVIDERS = %w[
     auto cloudflare digitalocean gcloud godaddy hetzner namecheap none route53 vultr
   ].freeze
 
-  # Short forms kamal-proxy's ParseProviderName accepts but does not advertise,
+  # Short forms dash-proxy's ParseProviderName accepts but does not advertise,
   # so they cannot be generated from --help and are not drift-checked.
   DNS_PROVIDER_ALIASES = %w[ cf do gcp google googledns gd hz nc aws r53 vr ].freeze
 
@@ -70,7 +70,7 @@ class Dash::Configuration::Proxy::Acme
 
   private
     # The hash form pins zones to the DNS host that serves them; `default`
-    # covers unmatched zones. kamal-proxy takes repeatable --acme-dns-provider
+    # covers unmatched zones. dash-proxy takes repeatable --acme-dns-provider
     # entries — zone=provider pairs plus at most one bare default — so the hash
     # becomes an array and Utils.optionize repeats the flag. The string form
     # passes through untouched and keeps meaning what it always has.

data/lib/dash/configuration/proxy/boot.rb

@@ -41,10 +41,8 @@ class Dash::Configuration::Proxy::Boot
     "#{repository_name}/#{image_name}"
   end
 
-  # Stays kamal-proxy until the server-artifact rename ships a migration
-  # bridge — every deployed host has a running container by this name.
   def container_name
-    "kamal-proxy"
+    Dash::Configuration::Proxy::CONTAINER_NAME
   end
 
   def host_directory
@@ -72,7 +70,7 @@ class Dash::Configuration::Proxy::Boot
   end
 
   def apps_container_directory
-    "/home/kamal-proxy/.apps-config"
+    "/home/dash-proxy/.apps-config"
   end
 
   def apps_volume

data/lib/dash/configuration/proxy/run.rb

@@ -1,5 +1,5 @@
 class Dash::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.7"
+  MINIMUM_VERSION = "v1.1.0.0"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"
@@ -103,7 +103,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def container_name
-    "kamal-proxy"
+    "dash-proxy"
   end
 
   # Zero-downtime reboots: a minimal long-lived holder container owns the
@@ -114,14 +114,14 @@ class Dash::Configuration::Proxy::Run
   end
 
   def holder_container_name
-    "kamal-proxy-net"
+    "dash-proxy-net"
   end
 
   def network_args
     if port_holder?
       [ "--network", "container:#{holder_container_name}" ]
     else
-      [ "--network", "kamal" ]
+      [ "--network", "dash" ]
     end
   end
 
@@ -136,7 +136,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def run_command
-    [ "kamal-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
+    [ "dash-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
   end
 
   def metrics_port
@@ -158,7 +158,7 @@ class Dash::Configuration::Proxy::Run
       .compact.merge(cache_options).merge(server_options)
   end
 
-  # Anything kamal-proxy accepts that has no key of its own yet. Values are
+  # Anything dash-proxy accepts that has no key of its own yet. Values are
   # optionized as written - `true` is a bare flag, anything else takes a value -
   # because the point of an escape hatch is that the gem holds no opinion about
   # the flag it is forwarding.
@@ -189,7 +189,7 @@ class Dash::Configuration::Proxy::Run
     ].compact
   end
 
-  # The flag only tells kamal-proxy where to look inside its own container, so
+  # The flag only tells dash-proxy where to look inside its own container, so
   # without this mount the socket is not there and a sleeping service never
   # wakes - which the operator sees as one hung request, not as a misconfiguration.
   def docker_socket_args
@@ -224,7 +224,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def apps_container_directory
-    "/home/kamal-proxy/.apps-config"
+    "/home/dash-proxy/.apps-config"
   end
 
   def apps_volume
@@ -288,7 +288,7 @@ class Dash::Configuration::Proxy::Run
     end
 
     # A passthrough flag that a named key already emits would be optionized
-    # twice, and kamal-proxy would silently take the last one. Refuse instead.
+    # twice, and dash-proxy would silently take the last one. Refuse instead.
     # Only Proxy::Run knows which flags the named keys produce, so the check
     # cannot live in the validator with the rest.
     def ensure_no_conflicting_flags
@@ -303,7 +303,7 @@ class Dash::Configuration::Proxy::Run
     # than of any one service - the policy that fills the cache is per service,
     # in proxy/cache. The store itself is deliberately absent: a store URL may
     # embed credentials, so it travels as CACHE_STORE in the secrets env file
-    # (kamal-proxy reads it as the --cache-store default) rather than on a
+    # (dash-proxy reads it as the --cache-store default) rather than on a
     # command line that lands in process listings and the audit log.
     def cache_options
       cache = run_config["cache"] || {}

data/lib/dash/configuration/proxy.rb

@@ -2,11 +2,33 @@ class Dash::Configuration::Proxy
   include Dash::Configuration::Validation
 
   DEFAULT_LOG_REQUEST_HEADERS = [ "Cache-Control", "Last-Modified", "User-Agent" ]
-  CONTAINER_NAME = "kamal-proxy"
-  LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  CONTAINER_NAME = "dash-proxy"
+  LOADBALANCER_CONTAINER_NAME = "dash-loadbalancer"
   CLIENT_CA_FILENAME = "client-ca.pem"
 
-  # What `compress: true` offers. kamal-proxy has no "on" state without an
+  # The image label the prune filters key on, set by dash-proxy's publish
+  # workflow.
+  IMAGE_TITLE = "dash-proxy"
+  LOADBALANCER_IMAGE_TITLE = "dash-loadbalancer"
+
+  NETWORK = "dash"
+  CONFIG_VOLUME = "dash-proxy-config"
+  LOADBALANCER_CONFIG_VOLUME = "dash-loadbalancer-config"
+
+  # Pre-rename names, kept only so the stage-3c migration can find what a host
+  # already has: the container to replace, the volume to copy, the network to
+  # bridge, and the image label to keep pruning by. Nothing constructs a
+  # resource with these — stage 3d deletes them.
+  LEGACY_CONTAINER_NAME = "kamal-proxy"
+  LEGACY_LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  LEGACY_HOLDER_CONTAINER_NAME = "kamal-proxy-net"
+  LEGACY_NETWORK = "kamal"
+  LEGACY_CONFIG_VOLUME = "kamal-proxy-config"
+  LEGACY_LOADBALANCER_CONFIG_VOLUME = "kamal-loadbalancer-config"
+  LEGACY_IMAGE_TITLE = "kamal-proxy"
+  LEGACY_LOADBALANCER_IMAGE_TITLE = "kamal-loadbalancer"
+
+  # What `compress: true` offers. dash-proxy has no "on" state without an
   # explicit list - --compress *is* the list - so the shorthand has to pick.
   # Best ratio first, matching the proxy's own default ordering; the client's
   # Accept-Encoding q-values still outrank this preference.
@@ -14,7 +36,7 @@ class Dash::Configuration::Proxy
 
   SUPPORTED_COMPRESSION_ENCODINGS = %w[ gzip br zstd ].freeze
 
-  # kamal-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
+  # dash-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
   COMPRESSION_ENCODING_ALIASES = { "brotli" => "br" }.freeze
 
   # The layering contract. When the fork's load balancer fronts the per-host
@@ -32,7 +54,7 @@ class Dash::Configuration::Proxy
   # Without load balancing the single proxy is every layer at once and the
   # whole surface applies to it.
   DEPLOY_OPTION_DISPOSITIONS = {
-    # --- Edge: TLS terminates where the handshake happens, and kamal-proxy
+    # --- Edge: TLS terminates where the handshake happens, and dash-proxy
     # gates TLSRedirect on TLSEnabled, so the whole family travels together.
     host: :edge,
     tls: :edge,
@@ -59,7 +81,7 @@ class Dash::Configuration::Proxy
     "rate-limit-burst": :edge,
     "rate-limit-exempt": :edge,
 
-    # --- Edge: kamal-proxy deletes the Authorization header once a service
+    # --- Edge: dash-proxy deletes the Authorization header once a service
     # enforces basic auth, so an inner proxy would 401 the credential-less
     # request the load balancer forwards. Credentials belong at the edge only.
     "basic-auth": :edge,
@@ -311,7 +333,7 @@ class Dash::Configuration::Proxy
     proxy_config["path_prefixes"] || proxy_config["path_prefix"]&.split(",") || []
   end
 
-  # Nil when unset: the default lives in kamal-proxy, not here.
+  # Nil when unset: the default lives in dash-proxy, not here.
   def healthcheck_path
     proxy_config.dig("healthcheck", "path")
   end
@@ -370,7 +392,7 @@ class Dash::Configuration::Proxy
     optionize ({ target: "#{target}:#{app_port}" }).merge(deploy_options), with: "="
   end
 
-  # kamal-proxy rollout deploy only accepts the target and the timeouts - the service already
+  # dash-proxy rollout deploy only accepts the target and the timeouts - the service already
   # exists, so it keeps the host, TLS, buffering and logging options of the live deploy.
   def rollout_deploy_options
     {
@@ -426,7 +448,7 @@ class Dash::Configuration::Proxy
       primary_role.present? && primary_role.running_proxy? && Array(primary_role.hosts).size > 1
     end
 
-    # Flags for kamal-proxy's dynamic domain source (runtime TLS hostnames).
+    # Flags for dash-proxy's dynamic domain source (runtime TLS hostnames).
     # TLS terminates wherever these flags land — :edge in the layering contract.
     def ssl_domains_options
       {
@@ -449,7 +471,7 @@ class Dash::Configuration::Proxy
     # The connection pool between the proxy and this app's containers, and how
     # hard the proxy tries to place a request on a healthy one.
     #
-    # Every value is passed through exactly as written. kamal-proxy resolves its
+    # Every value is passed through exactly as written. dash-proxy resolves its
     # own defaults from a zero (target_pool.go), and it has to do that server
     # side because restored state and older RPC clients never see the CLI — so
     # substituting a default here would be both redundant and wrong.
@@ -517,7 +539,7 @@ class Dash::Configuration::Proxy
       proxy_config["headers"] || {}
     end
 
-    # kamal-proxy cuts a rule at the first colon, so a value carrying colons of
+    # dash-proxy cuts a rule at the first colon, so a value carrying colons of
     # its own arrives intact.
     def header_rules(direction, verb)
       (headers_config.dig(direction, verb) || {}).map { |name, value| "#{name}: #{value}" }.presence
@@ -574,7 +596,7 @@ class Dash::Configuration::Proxy
 
     # The cache policy, which is per service - the store it writes into is
     # proxy-wide and lives in proxy/run/cache. Only --cache is derived from a
-    # truthy key; every other default stays in kamal-proxy, so an unset key emits
+    # truthy key; every other default stays in dash-proxy, so an unset key emits
     # nothing rather than restating a default the gem would then have to track.
     def cache_options
       cache = proxy_config["cache"] || {}
@@ -600,7 +622,7 @@ class Dash::Configuration::Proxy
       File.join([ directory, role_name, filename ].compact)
     end
 
-    # kamal-proxy takes the credential as <username>:<password> and cuts at the
+    # dash-proxy takes the credential as <username>:<password> and cuts at the
     # first colon, so a password may contain colons but a username may not (the
     # validator enforces that). The password is read from .dash/secrets when
     # password_secret names it, so it need not live in deploy.yml.
@@ -628,7 +650,7 @@ class Dash::Configuration::Proxy
       Dash::Utils.sensitive("#{basic_auth["username"]}:#{password}")
     end
 
-    # Serves both --path-timeout and --path-request-timeout, which kamal-proxy
+    # Serves both --path-timeout and --path-request-timeout, which dash-proxy
     # reads with one parser. A duration may be a Go string ("5m") or plain
     # seconds; 0 is a value, meaning no limit for that prefix.
     def path_timeout_args(key)

data/lib/dash/configuration/role.rb

@@ -148,7 +148,7 @@ class Dash::Configuration::Role
   def readiness_description
     case readiness_source
     when :proxy
-      [ "kamal-proxy health check", proxy.healthcheck_path ].compact.join(" ")
+      [ "dash-proxy health check", proxy.healthcheck_path ].compact.join(" ")
     when :healthcheck
       healthcheck.port ? "healthcheck #{healthcheck.path}:#{healthcheck.port}" : "healthcheck (custom cmd)"
     when :healthcheck_exec
@@ -168,7 +168,7 @@ class Dash::Configuration::Role
   end
 
   def stop_args
-    # When deploying with the proxy, kamal-proxy will drain request before returning so we don't need to wait.
+    # When deploying with the proxy, dash-proxy will drain request before returning so we don't need to wait.
     timeout = stop_timeout || (running_proxy? ? nil : config.drain_timeout)
 
     [ *argumentize("-t", timeout) ]