diff --git a/On host/Caddy.md b/On host/Caddy.md index 5d8a861..1f2bc32 100644 --- a/On host/Caddy.md +++ b/On host/Caddy.md @@ -54,10 +54,10 @@ sudo vim /etc/caddy/Caddyfile ``` { debug - http_port 80 - https_port 443 - email admin@delmar.bzh - default_sni delmar.bzh + http_port 80 + https_port 443 + email admin@delmar.bzh + default_sni delmar.bzh acme_dns ovh { endpoint ovh-eu @@ -68,189 +68,192 @@ sudo vim /etc/caddy/Caddyfile } (LAN_only) { - @local_subnets { - not remote_ip 192.168.1.0/24 - } - respond @local_subnets 403 + @local_subnets { + not remote_ip 192.168.1.0/24 + } + respond @local_subnets 403 } *:80 { - root * /var/www/comics - encode gzip zstd - file_server + root * /var/www/comics + encode gzip zstd + file_server } bookstack.delmar.bzh - reverse_proxy carlo:6875 - encode gzip zstd +reverse_proxy carlo:6875 +encode gzip zstd } books.delmar.bzh { - reverse_proxy sandy:8083 { - header_up X-Scheme https - } - encode gzip zstd + reverse_proxy sandy:8083 { + header_up X-Scheme https + } + encode gzip zstd } cloud.delmar.bzh { - encode gzip zstd - reverse_proxy sandy:35771 { - header_up Host {upstream_hostport} - } + encode gzip zstd + reverse_proxy sandy:35771 { + header_up Host {upstream_hostport} + } - redir /.well-known/carddav /remote.php/dav/ 301 - redir /.well-known/caldav /remote.php/dav/ 301 + redir /.well-known/carddav /remote.php/dav/ 301 + redir /.well-known/caldav /remote.php/dav/ 301 - header { - Strict-Transport-Security "max-age=31536000; includeSubdomains; preload" - X-XSS-Protection "1; mode=block;" - X-Content-Type-Options "nosniff" - X-Frame-Options "SAMEORIGIN" - } + header { + Strict-Transport-Security "max-age=31536000; includeSubdomains; preload" + X-XSS-Protection "1; mode=block;" + X-Content-Type-Options "nosniff" + X-Frame-Options "SAMEORIGIN" + } } stun.delmar.bzh { - encode gzip zstd - reverse_proxy sandy:44397 + encode gzip zstd + reverse_proxy sandy:44397 } webmin.delmar.bzh { - reverse_proxy bob:10000 { - transport http { - read_buffer 0 - write_buffer 0 - tls_insecure_skip_verify - versions 1.1 - } + reverse_proxy bob:10000 { + transport http { + read_buffer 0 + write_buffer 0 + tls_insecure_skip_verify + versions 1.1 + } } - encode gzip zstd + encode gzip zstd } dolibarr.delmar.bzh { - reverse_proxy carlo:64616 - encode gzip zstd + reverse_proxy carlo:64616 + encode gzip zstd } draw.delmar.bzh { - reverse_proxy carlo:8080 - encode gzip zstd + reverse_proxy carlo:8080 + encode gzip zstd } git.delmar.bzh { - reverse_proxy sheldon:3000 - encode gzip zstd + reverse_proxy sheldon:3000 + encode gzip zstd } homepage.delmar.bzh { - reverse_proxy bob:5005 - encode gzip zstd + reverse_proxy bob:5005 + encode gzip zstd } home-assistant.delmar.bzh { - reverse_proxy carlo:8123 - encode gzip zstd + reverse_proxy carlo:8123 + encode gzip zstd } it.delmar.bzh { - reverse_proxy bob:8888 - encode gzip zstd + reverse_proxy bob:8888 + encode gzip zstd } cs.delmar.bzh { - reverse_proxy sheldon:49505 - encode gzip zstd + reverse_proxy sheldon:49505 + encode gzip zstd } jellyfin.delmar.bzh { - reverse_proxy gary:8096 - encode gzip zstd + reverse_proxy gary:8096 + encode gzip zstd } jellyseerr.delmar.bzh { - reverse_proxy gary:5055 - encode gzip zstd + reverse_proxy gary:5055 + encode gzip zstd } wizarr.delmar.bzh { - reverse_proxy gary:5690 - encode gzip zstd + reverse_proxy gary:5690 + encode gzip zstd } julien.delmar.bzh { - root * /var/www/resumes/julien - encode gzip zstd - file_server + root * /var/www/resumes/julien + encode gzip zstd + file_server } kontadenn.delmar.bzh { - root * /var/www/kontadenn - encode gzip zstd - file_server + root * /var/www/kontadenn + encode gzip zstd + file_server } nds.delmar.bzh { - root * /var/www/nds - encode gzip zstd - file_server + root * /var/www/nds + encode gzip zstd + file_server } nsns.delmar.bzh { - root * /var/www/nsns - encode gzip zstd - file_server + root * /var/www/nsns + encode gzip zstd + file_server } paperless.delmar.bzh { - reverse_proxy sandy:8000 - encode gzip zstd + reverse_proxy sandy:8000 + encode gzip zstd } penpot.delmar.bzh { - reverse_proxy sandy:43735 - encode gzip zstd + reverse_proxy sandy:43735 + encode gzip zstd } send.delmar.bzh { - reverse_proxy krabs:3000 - encode gzip zstd + reverse_proxy krabs:3000 + encode gzip zstd } tools.delmar.bzh { - reverse_proxy sandy:9890 - encode gzip zstd + reverse_proxy sandy:9890 + encode gzip zstd } ugo.delmar.bzh { - reverse_proxy carlo:8090 - encode gzip zstd + reverse_proxy carlo:8090 + encode gzip zstd } vault.delmar.bzh { - reverse_proxy carlo:8081 - encode gzip zstd + reverse_proxy carlo:8081 + encode gzip zstd } www.delmar.bzh { - root * /var/www/comics - encode gzip zstd - file_server + root * /var/www/comics + encode gzip zstd + file_server } octoprint.delmar.bzh { - reverse_proxy bernie:54963 { - header_up X-Forwarded-Proto {scheme} - } - encode gzip zstd + reverse_proxy bernie:54963 { + header_up X-Forwarded-Proto {scheme} + } + encode gzip zstd } stream.delmar.bzh { - reverse_proxy bernie:8080 - encode gzip zstd + reverse_proxy bernie:8080 + encode gzip zstd + basic_auth / { + admin $2a$14$RuKvTkZWcLpyX/ptJmkmYOd6WpDACXi.fIcz2feCcvTW73vZ/4TSi + } } squirrel.delmar.bzh { - reverse_proxy bob:8000 - encode gzip zstd + reverse_proxy bob:8000 + encode gzip zstd } ```