Backport of #27544

Original PR: #27544 — fix(coderd): reject workspace proxy hostname
prefixes
Merge commit: 8cc7f2b
Requested by: @geokat

Co-authored-by: George K <[email protected]>
Co-authored-by: Bobby Ho <[email protected]>

…8157)

Backport of #28101

Original PR: #28101 — docs: fix P2/P3 typos and syntax errors from drift
sweep
Merge commit: 1d189cc
Requested by: @nickvigilante

Co-authored-by: Nick Vigilante <[email protected]>

Backport of #28087

Original PR: #28087 — docs: fix Helm TLS/ingress value keys in
admin/setup
Merge commit: 5b97d99
Requested by: @nickvigilante

Co-authored-by: Nick Vigilante <[email protected]>

…#28086) (#28160)

Backport of #28086

Original PR: #28086 — docs: correct nginx X-Forwarded-Proto and certbot
instructions flavor
Merge commit: b0e93b6
Requested by: @nickvigilante

Co-authored-by: Nick Vigilante <[email protected]>

…e` (#28084) (#28159)

Backport of #28084

Original PR: #28084 — docs: remove invalid `--yes` flag from `coder
template version promote`
Merge commit: f3fd4c4
Requested by: @nickvigilante

Co-authored-by: Nick Vigilante <[email protected]>

…ckport to release/2.29) (#28176)

Backport of #28098 to `release/2.29` (ESR).

Replaces the stale automated backport #28163, whose branch was an empty
placeholder based on an older `release/2.29` (the branch predates four
docs backports that have since merged: #28159, #28160, #28162, #28157).
This branch is cut from the current `release/2.29` tip and cherry-picks
`58de9ab8f87e` with `git cherry-pick -x`.

**Conflicts resolved manually:**
- `dx-data-cloud.md`, `users/index.md`: kept 2.29's `shell` fence and
applied the `coder users list --output json | jq ... | @csv > users.csv`
pipeline (same fence divergence as on `main`).
- `docs/ai-coder/github-to-tasks.md`: that page does not exist on
`release/2.29`, so its hunk is dropped. The backport touches
`scale-utility.md`, `dx-data-cloud.md`, `users/index.md`, and
`workspace-access/index.md`.

Once reviewed, #28163 can be closed in favor of this PR.

- Original PR: #28098
- Replaces: #28163
- Tracking: DOCS-651

> This PR was created with AI assistance (Coder Agents).

…2.29) (#28177)

Backport of #28085 to `release/2.29` (ESR).

Replaces the stale automated backport #28164, whose branch was an empty
placeholder based on an older `release/2.29`. This branch is cut from
the current `release/2.29` tip and cherry-picks `3145cc8386f9` with `git
cherry-pick -x`.

**Scope note:** only the `slack.md` fix (removing the stray trailing
backtick from the `CODER_NOTIFICATIONS_WEBHOOK_ENDPOINT` export) applies
to 2.29. #28085 also fixed a doubled-prefix metric name in
`prometheus.md`, but `release/2.29`'s native-histograms list does not
include `coderd_template_workspace_build_duration_seconds` at all, so
that hunk is intentionally dropped rather than adding a metric 2.29 does
not document. The `slack.md` conflict kept 2.29's `bash` fence.

Once reviewed, #28164 can be closed in favor of this PR.

- Original PR: #28085
- Replaces: #28164
- Tracking: DOCS-651

> This PR was created with AI assistance (Coder Agents).

…28957)

Backport of #28429

Original PR: #28429 — fix: prevent coderd crashes from unsupported
Tailnet RPCs
Merge commit: 156c8b6
Requested by: @geokat

> [!WARNING]
> The automatic cherry-pick had conflicts.
> Please resolve manually by cherry-picking the original merge commit:
>
> ```
> git fetch origin backport/28429-to-2.29
> git checkout backport/28429-to-2.29
> git reset --hard origin/release/2.29
> git cherry-pick -x -m1 156c8b6
> # resolve conflicts, then push
> ```

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: George K <[email protected]>