docker/caddy/Caddyfile

114 lines
2.7 KiB
Caddyfile

{
acme_dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
bizmatch.net {
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}
www.bizmatch.net {
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}
bayarea-cc.com, www.bayarea-cc.com {
# SSL/TLS mit Cloudflare DNS Challenge
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
# Statische Dateien aus dem Angular Build-Verzeichnis
# root * /app
# file_server
# Fallback für Angular SPA Routing
# try_files {path} /index.html
handle {
root * /app
try_files {path} {path}/ /index.html
file_server
}
# Reverse Proxy für API-Anfragen an Nest.js
@api {
path /api/*
}
reverse_proxy @api localhost:3001 {
# Optional: Header für Debugging
header_up X-Real-IP {remote_host}
}
# Logging (optional)
log {
output file /var/log/caddy/bayarea-cc.log
format console
}
# Komprimierung für bessere Performance
encode gzip
}
auth.bizmatch.net {
reverse_proxy keycloak:8080 {
header_up Host {http.request.host}
header_up X-Real-IP {http.request.remote}
header_up X-Forwarded-For {http.request.remote}
header_up X-Forwarded-Host {http.request.host}
header_up X-Forwarded-Server {http.request.host}
header_up X-Forwarded-Port {http.request.port}
header_up X-Forwarded-Proto {http.request.scheme}
header_up Upgrade {http.request.header.Upgrade}
header_up Connection {http.request.header.Connection}
# Entfernen des X-Frame-Options-Headers
# header_up -X-Frame-Options
}
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}
gitea.bizmatch.net {
reverse_proxy gitea:3500
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}
dev.bizmatch.net {
handle /pictures/* {
root * /home/aknuth/git/bizmatch-project/bizmatch-server
file_server
}
handle {
root * /srv
try_files {path} {path}/ /index.html
file_server
}
log {
output file /var/log/caddy/access.log {
roll_size 10MB
roll_keep 5
roll_keep_for 48h
}
}
encode gzip
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}
api-dev.bizmatch.net {
reverse_proxy host.docker.internal:3000 {
header_up X-Real-IP {http.request.header.CF-Connecting-IP}
header_up X-Forwarded-For {http.request.header.CF-Connecting-IP}
header_up X-Forwarded-Proto {http.request.header.X-Forwarded-Proto}
header_up CF-IPCountry {http.request.header.CF-IPCountry}
}
tls {
dns cloudflare q1P7J3uqS96FGj_iiX2mI8y1ulTaIFrTp8tyTXhG
}
}