From 8bd0cce4e3ec63896968b1067847cfc13dd0de1c Mon Sep 17 00:00:00 2001
From: Andreas Knuth <andreas.knuth@gmail.com>
Date: Tue, 25 Feb 2025 20:12:31 +0100
Subject: [PATCH] =?UTF-8?q?bayarea=20=C3=9Cberarbeitung?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 caddy/Caddyfile | 50 +++++++++++++++++++++++++++++++------------------
 1 file changed, 32 insertions(+), 18 deletions(-)

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 8d17b5e..018c357 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -11,14 +11,40 @@ www.bizmatch.net {
 
 }
 bayarea-cc.com {
-    handle /api {
-        reverse_proxy host.docker.internal:3001
+    # Einrichtung spezifisch für Cloudflare Proxy
+    tls {
+        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
     }
+    
+    # Spezielle Behandlung für Anfragen, die über Cloudflare kommen
+    @cloudflare {
+        header Cdn-Loop cloudflare*
+    }
+    
+    # Wenn über Cloudflare, keine Weiterleitung zu HTTPS erzwingen
+    handle @cloudflare {
+        handle /api {
+            reverse_proxy host.docker.internal:3001
+        }
+        handle {
+            root * /app
+            try_files {path} /index.html
+            file_server
+        }
+    }
+    
+    # Für direkte Anfragen
     handle {
-        root * /app
-        try_files {path} /index.html
-        file_server
+        handle /api {
+            reverse_proxy host.docker.internal:3001
+        }
+        handle {
+            root * /app
+            try_files {path} /index.html
+            file_server
+        }
     }
+    
     log {
         output stderr
         format console
@@ -26,19 +52,7 @@ bayarea-cc.com {
     encode gzip
 }
 www.bayarea-cc.com {
-    handle /api {
-        reverse_proxy host.docker.internal:3001
-    }
-    handle {
-        root * /app
-        try_files {path} /index.html
-        file_server
-    }
-    log {
-        output stderr
-        format console
-    }
-    encode gzip
+    redir https://bayarea-cc.com{uri} permanent
 }
 auth.bizmatch.net {
     reverse_proxy keycloak:8080 {