Updated Cadyfile

This commit is contained in:
2025-05-05 09:22:31 +02:00
parent 1a17867c6c
commit 6b2afdbb3b

View File

@@ -54,10 +54,10 @@ sudo vim /etc/caddy/Caddyfile
```
{
debug
http_port 80
https_port 443
email admin@delmar.bzh
default_sni delmar.bzh
http_port 80
https_port 443
email admin@delmar.bzh
default_sni delmar.bzh
acme_dns ovh {
endpoint ovh-eu
@@ -68,189 +68,192 @@ sudo vim /etc/caddy/Caddyfile
}
(LAN_only) {
@local_subnets {
not remote_ip 192.168.1.0/24
}
respond @local_subnets 403
@local_subnets {
not remote_ip 192.168.1.0/24
}
respond @local_subnets 403
}
*:80 {
root * /var/www/comics
encode gzip zstd
file_server
root * /var/www/comics
encode gzip zstd
file_server
}
bookstack.delmar.bzh
reverse_proxy carlo:6875
encode gzip zstd
reverse_proxy carlo:6875
encode gzip zstd
}
books.delmar.bzh {
reverse_proxy sandy:8083 {
header_up X-Scheme https
}
encode gzip zstd
reverse_proxy sandy:8083 {
header_up X-Scheme https
}
encode gzip zstd
}
cloud.delmar.bzh {
encode gzip zstd
reverse_proxy sandy:35771 {
header_up Host {upstream_hostport}
}
encode gzip zstd
reverse_proxy sandy:35771 {
header_up Host {upstream_hostport}
}
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
header {
Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
X-XSS-Protection "1; mode=block;"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
}
header {
Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
X-XSS-Protection "1; mode=block;"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
}
}
stun.delmar.bzh {
encode gzip zstd
reverse_proxy sandy:44397
encode gzip zstd
reverse_proxy sandy:44397
}
webmin.delmar.bzh {
reverse_proxy bob:10000 {
transport http {
read_buffer 0
write_buffer 0
tls_insecure_skip_verify
versions 1.1
}
reverse_proxy bob:10000 {
transport http {
read_buffer 0
write_buffer 0
tls_insecure_skip_verify
versions 1.1
}
}
encode gzip zstd
encode gzip zstd
}
dolibarr.delmar.bzh {
reverse_proxy carlo:64616
encode gzip zstd
reverse_proxy carlo:64616
encode gzip zstd
}
draw.delmar.bzh {
reverse_proxy carlo:8080
encode gzip zstd
reverse_proxy carlo:8080
encode gzip zstd
}
git.delmar.bzh {
reverse_proxy sheldon:3000
encode gzip zstd
reverse_proxy sheldon:3000
encode gzip zstd
}
homepage.delmar.bzh {
reverse_proxy bob:5005
encode gzip zstd
reverse_proxy bob:5005
encode gzip zstd
}
home-assistant.delmar.bzh {
reverse_proxy carlo:8123
encode gzip zstd
reverse_proxy carlo:8123
encode gzip zstd
}
it.delmar.bzh {
reverse_proxy bob:8888
encode gzip zstd
reverse_proxy bob:8888
encode gzip zstd
}
cs.delmar.bzh {
reverse_proxy sheldon:49505
encode gzip zstd
reverse_proxy sheldon:49505
encode gzip zstd
}
jellyfin.delmar.bzh {
reverse_proxy gary:8096
encode gzip zstd
reverse_proxy gary:8096
encode gzip zstd
}
jellyseerr.delmar.bzh {
reverse_proxy gary:5055
encode gzip zstd
reverse_proxy gary:5055
encode gzip zstd
}
wizarr.delmar.bzh {
reverse_proxy gary:5690
encode gzip zstd
reverse_proxy gary:5690
encode gzip zstd
}
julien.delmar.bzh {
root * /var/www/resumes/julien
encode gzip zstd
file_server
root * /var/www/resumes/julien
encode gzip zstd
file_server
}
kontadenn.delmar.bzh {
root * /var/www/kontadenn
encode gzip zstd
file_server
root * /var/www/kontadenn
encode gzip zstd
file_server
}
nds.delmar.bzh {
root * /var/www/nds
encode gzip zstd
file_server
root * /var/www/nds
encode gzip zstd
file_server
}
nsns.delmar.bzh {
root * /var/www/nsns
encode gzip zstd
file_server
root * /var/www/nsns
encode gzip zstd
file_server
}
paperless.delmar.bzh {
reverse_proxy sandy:8000
encode gzip zstd
reverse_proxy sandy:8000
encode gzip zstd
}
penpot.delmar.bzh {
reverse_proxy sandy:43735
encode gzip zstd
reverse_proxy sandy:43735
encode gzip zstd
}
send.delmar.bzh {
reverse_proxy krabs:3000
encode gzip zstd
reverse_proxy krabs:3000
encode gzip zstd
}
tools.delmar.bzh {
reverse_proxy sandy:9890
encode gzip zstd
reverse_proxy sandy:9890
encode gzip zstd
}
ugo.delmar.bzh {
reverse_proxy carlo:8090
encode gzip zstd
reverse_proxy carlo:8090
encode gzip zstd
}
vault.delmar.bzh {
reverse_proxy carlo:8081
encode gzip zstd
reverse_proxy carlo:8081
encode gzip zstd
}
www.delmar.bzh {
root * /var/www/comics
encode gzip zstd
file_server
root * /var/www/comics
encode gzip zstd
file_server
}
octoprint.delmar.bzh {
reverse_proxy bernie:54963 {
header_up X-Forwarded-Proto {scheme}
}
encode gzip zstd
reverse_proxy bernie:54963 {
header_up X-Forwarded-Proto {scheme}
}
encode gzip zstd
}
stream.delmar.bzh {
reverse_proxy bernie:8080
encode gzip zstd
reverse_proxy bernie:8080
encode gzip zstd
basic_auth / {
admin $2a$14$RuKvTkZWcLpyX/ptJmkmYOd6WpDACXi.fIcz2feCcvTW73vZ/4TSi
}
}
squirrel.delmar.bzh {
reverse_proxy bob:8000
encode gzip zstd
reverse_proxy bob:8000
encode gzip zstd
}
```