94 lines
2.1 KiB
Caddyfile
94 lines
2.1 KiB
Caddyfile
{
|
|
email {$ACME_EMAIL:[email protected]}
|
|
}
|
|
|
|
# Reusable TLS block using Cloudflare DNS-01 ACME challenge (Let's Encrypt / ZeroSSL)
|
|
(cloudflare_tls) {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
}
|
|
|
|
# Synotrip (PHP 8.3 / MariaDB / Redis)
|
|
synotrip.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3200
|
|
}
|
|
|
|
npm.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:4873
|
|
}
|
|
|
|
# Blog (PHP 8.3 / MariaDB)
|
|
blog.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3201
|
|
}
|
|
|
|
gig-api.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:8088
|
|
}
|
|
|
|
gig-static.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:8088
|
|
}
|
|
|
|
gig-db.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3100
|
|
}
|
|
|
|
gig-web.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy host.docker.internal:3101
|
|
}
|
|
|
|
|
|
# Gitea on Z2Pro
|
|
gitea.kucial.com {
|
|
import cloudflare_tls
|
|
reverse_proxy 192.168.50.228:8081
|
|
}
|
|
|
|
*.ddev.kucial.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
|
|
@api host gig-api.ddev.kucial.com
|
|
handle @api {
|
|
reverse_proxy https://192.168.50.160:443 {
|
|
header_up Host gig-platform.ddev.site
|
|
transport http {
|
|
tls_server_name gig-platform.ddev.site
|
|
# The public device-facing certificate is still fully trusted.
|
|
# This applies only to the fixed, private Caddy-to-DDEV hop.
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
}
|
|
|
|
@socket host gig-socket.ddev.kucial.com
|
|
handle @socket {
|
|
reverse_proxy http://192.168.50.160:6001 {
|
|
header_up Host gig-platform.ddev.site
|
|
}
|
|
}
|
|
|
|
@static host gig-static.ddev.kucial.com
|
|
handle @static {
|
|
reverse_proxy https://192.168.50.160:443 {
|
|
header_up Host gig-platform.ddev.site
|
|
transport http {
|
|
tls_server_name gig-platform.ddev.site
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
}
|
|
|
|
respond 404
|
|
}
|