Updated Cadyfile

This commit is contained in:
2025-05-05 09:22:31 +02:00
parent 1a17867c6c
commit 6b2afdbb3b

View File

@@ -54,10 +54,10 @@ sudo vim /etc/caddy/Caddyfile
``` ```
{ {
debug debug
http_port 80 http_port 80
https_port 443 https_port 443
email admin@delmar.bzh email admin@delmar.bzh
default_sni delmar.bzh default_sni delmar.bzh
acme_dns ovh { acme_dns ovh {
endpoint ovh-eu endpoint ovh-eu
@@ -68,189 +68,192 @@ sudo vim /etc/caddy/Caddyfile
} }
(LAN_only) { (LAN_only) {
@local_subnets { @local_subnets {
not remote_ip 192.168.1.0/24 not remote_ip 192.168.1.0/24
} }
respond @local_subnets 403 respond @local_subnets 403
} }
*:80 { *:80 {
root * /var/www/comics root * /var/www/comics
encode gzip zstd encode gzip zstd
file_server file_server
} }
bookstack.delmar.bzh bookstack.delmar.bzh
reverse_proxy carlo:6875 reverse_proxy carlo:6875
encode gzip zstd encode gzip zstd
} }
books.delmar.bzh { books.delmar.bzh {
reverse_proxy sandy:8083 { reverse_proxy sandy:8083 {
header_up X-Scheme https header_up X-Scheme https
} }
encode gzip zstd encode gzip zstd
} }
cloud.delmar.bzh { cloud.delmar.bzh {
encode gzip zstd encode gzip zstd
reverse_proxy sandy:35771 { reverse_proxy sandy:35771 {
header_up Host {upstream_hostport} header_up Host {upstream_hostport}
} }
redir /.well-known/carddav /remote.php/dav/ 301 redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301 redir /.well-known/caldav /remote.php/dav/ 301
header { header {
Strict-Transport-Security "max-age=31536000; includeSubdomains; preload" Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
X-XSS-Protection "1; mode=block;" X-XSS-Protection "1; mode=block;"
X-Content-Type-Options "nosniff" X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN" X-Frame-Options "SAMEORIGIN"
} }
} }
stun.delmar.bzh { stun.delmar.bzh {
encode gzip zstd encode gzip zstd
reverse_proxy sandy:44397 reverse_proxy sandy:44397
} }
webmin.delmar.bzh { webmin.delmar.bzh {
reverse_proxy bob:10000 { reverse_proxy bob:10000 {
transport http { transport http {
read_buffer 0 read_buffer 0
write_buffer 0 write_buffer 0
tls_insecure_skip_verify tls_insecure_skip_verify
versions 1.1 versions 1.1
} }
} }
encode gzip zstd encode gzip zstd
} }
dolibarr.delmar.bzh { dolibarr.delmar.bzh {
reverse_proxy carlo:64616 reverse_proxy carlo:64616
encode gzip zstd encode gzip zstd
} }
draw.delmar.bzh { draw.delmar.bzh {
reverse_proxy carlo:8080 reverse_proxy carlo:8080
encode gzip zstd encode gzip zstd
} }
git.delmar.bzh { git.delmar.bzh {
reverse_proxy sheldon:3000 reverse_proxy sheldon:3000
encode gzip zstd encode gzip zstd
} }
homepage.delmar.bzh { homepage.delmar.bzh {
reverse_proxy bob:5005 reverse_proxy bob:5005
encode gzip zstd encode gzip zstd
} }
home-assistant.delmar.bzh { home-assistant.delmar.bzh {
reverse_proxy carlo:8123 reverse_proxy carlo:8123
encode gzip zstd encode gzip zstd
} }
it.delmar.bzh { it.delmar.bzh {
reverse_proxy bob:8888 reverse_proxy bob:8888
encode gzip zstd encode gzip zstd
} }
cs.delmar.bzh { cs.delmar.bzh {
reverse_proxy sheldon:49505 reverse_proxy sheldon:49505
encode gzip zstd encode gzip zstd
} }
jellyfin.delmar.bzh { jellyfin.delmar.bzh {
reverse_proxy gary:8096 reverse_proxy gary:8096
encode gzip zstd encode gzip zstd
} }
jellyseerr.delmar.bzh { jellyseerr.delmar.bzh {
reverse_proxy gary:5055 reverse_proxy gary:5055
encode gzip zstd encode gzip zstd
} }
wizarr.delmar.bzh { wizarr.delmar.bzh {
reverse_proxy gary:5690 reverse_proxy gary:5690
encode gzip zstd encode gzip zstd
} }
julien.delmar.bzh { julien.delmar.bzh {
root * /var/www/resumes/julien root * /var/www/resumes/julien
encode gzip zstd encode gzip zstd
file_server file_server
} }
kontadenn.delmar.bzh { kontadenn.delmar.bzh {
root * /var/www/kontadenn root * /var/www/kontadenn
encode gzip zstd encode gzip zstd
file_server file_server
} }
nds.delmar.bzh { nds.delmar.bzh {
root * /var/www/nds root * /var/www/nds
encode gzip zstd encode gzip zstd
file_server file_server
} }
nsns.delmar.bzh { nsns.delmar.bzh {
root * /var/www/nsns root * /var/www/nsns
encode gzip zstd encode gzip zstd
file_server file_server
} }
paperless.delmar.bzh { paperless.delmar.bzh {
reverse_proxy sandy:8000 reverse_proxy sandy:8000
encode gzip zstd encode gzip zstd
} }
penpot.delmar.bzh { penpot.delmar.bzh {
reverse_proxy sandy:43735 reverse_proxy sandy:43735
encode gzip zstd encode gzip zstd
} }
send.delmar.bzh { send.delmar.bzh {
reverse_proxy krabs:3000 reverse_proxy krabs:3000
encode gzip zstd encode gzip zstd
} }
tools.delmar.bzh { tools.delmar.bzh {
reverse_proxy sandy:9890 reverse_proxy sandy:9890
encode gzip zstd encode gzip zstd
} }
ugo.delmar.bzh { ugo.delmar.bzh {
reverse_proxy carlo:8090 reverse_proxy carlo:8090
encode gzip zstd encode gzip zstd
} }
vault.delmar.bzh { vault.delmar.bzh {
reverse_proxy carlo:8081 reverse_proxy carlo:8081
encode gzip zstd encode gzip zstd
} }
www.delmar.bzh { www.delmar.bzh {
root * /var/www/comics root * /var/www/comics
encode gzip zstd encode gzip zstd
file_server file_server
} }
octoprint.delmar.bzh { octoprint.delmar.bzh {
reverse_proxy bernie:54963 { reverse_proxy bernie:54963 {
header_up X-Forwarded-Proto {scheme} header_up X-Forwarded-Proto {scheme}
} }
encode gzip zstd encode gzip zstd
} }
stream.delmar.bzh { stream.delmar.bzh {
reverse_proxy bernie:8080 reverse_proxy bernie:8080
encode gzip zstd encode gzip zstd
basic_auth / {
admin $2a$14$RuKvTkZWcLpyX/ptJmkmYOd6WpDACXi.fIcz2feCcvTW73vZ/4TSi
}
} }
squirrel.delmar.bzh { squirrel.delmar.bzh {
reverse_proxy bob:8000 reverse_proxy bob:8000
encode gzip zstd encode gzip zstd
} }
``` ```