caddy
This commit is contained in:
parent
b321e6d2ec
commit
b072083318
|
|
@ -0,0 +1,303 @@
|
||||||
|
{
|
||||||
|
email {env.CLOUDFLARE_EMAIL}
|
||||||
|
acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
||||||
|
acme_ca https://acme-v02.api.letsencrypt.org/directory
|
||||||
|
debug
|
||||||
|
}
|
||||||
|
import email_autodiscover
|
||||||
|
# ---------------------------------------------------------
|
||||||
|
# Block A: Die dedizierten Autodiscover Domains
|
||||||
|
# ---------------------------------------------------------
|
||||||
|
autodiscover.bayarea-cc.com, autodiscover.bizmatch.net,
|
||||||
|
autodiscover.ruehrgedoens.de, autoconfig.ruehrgedoens.de,
|
||||||
|
autoconfig.bayarea-cc.com, autoconfig.bizmatch.net {
|
||||||
|
|
||||||
|
# Hier rufen wir das Snippet auf
|
||||||
|
import email_settings
|
||||||
|
|
||||||
|
# Fallback für Aufrufe auf Root dieser Subdomains
|
||||||
|
respond "Autodiscover Service Online" 200
|
||||||
|
}
|
||||||
|
|
||||||
|
# Prod: Neue Domains
|
||||||
|
www.bizmatch.net {
|
||||||
|
handle /pictures/* {
|
||||||
|
root * /home/aknuth/git/bizmatch-project/bizmatch-server # Prod-Ordner
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
# Statische Dateien (CSS, JS, Bilder) – lange cachen, da sich der Name bei Änderungen ändert
|
||||||
|
header /assets/* Cache-Control "public, max-age=31536000, immutable"
|
||||||
|
header /*.css Cache-Control "public, max-age=31536000, immutable"
|
||||||
|
header /*.js Cache-Control "public, max-age=31536000, immutable"
|
||||||
|
|
||||||
|
# Die index.html und API-Antworten – NIEMALS cachen
|
||||||
|
header /index.html Cache-Control "no-cache, no-store, must-revalidate"
|
||||||
|
|
||||||
|
#handle {
|
||||||
|
# root * /home/aknuth/git/bizmatch-project-prod/bizmatch/dist/bizmatch/browser # Neuer Prod-Dist-Ordner
|
||||||
|
# try_files {path} {path}/ /index.html
|
||||||
|
# file_server
|
||||||
|
#}
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:4200
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/access.prod.log # Separate Logs
|
||||||
|
}
|
||||||
|
encode gzip zstd
|
||||||
|
}
|
||||||
|
bizmatch.net {
|
||||||
|
redir https://www.bizmatch.net{uri} permanent
|
||||||
|
import email_settings
|
||||||
|
}
|
||||||
|
www.qrmaster.net {
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3050
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/qrmaster.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
qrmaster.net {
|
||||||
|
redir https://www.qrmaster.net{uri} permanent
|
||||||
|
}
|
||||||
|
bayarea-cc.com {
|
||||||
|
# TLS-Direktive entfernen, falls Cloudflare die Verbindung terminiert
|
||||||
|
# tls {
|
||||||
|
# dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
||||||
|
# }
|
||||||
|
|
||||||
|
handle /api {
|
||||||
|
reverse_proxy host.docker.internal:3001
|
||||||
|
}
|
||||||
|
handle {
|
||||||
|
root * /app
|
||||||
|
try_files {path} /index.html
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output stderr
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
import email_settings
|
||||||
|
}
|
||||||
|
www.bayarea-cc.com {
|
||||||
|
redir https://bayarea-cc.com{uri} permanent
|
||||||
|
}
|
||||||
|
setup.bayarea-cc.com {
|
||||||
|
# Wir setzen das Root-Verzeichnis auf den neuen Pfad im Container
|
||||||
|
root * /var/www/email-setup
|
||||||
|
|
||||||
|
# Webserver-Standardverhalten
|
||||||
|
file_server
|
||||||
|
|
||||||
|
# Wenn jemand nur die Domain aufruft, zeige setup.html
|
||||||
|
try_files {path} /setup.html
|
||||||
|
}
|
||||||
|
cielectrical.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3000
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/cielectrical.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
hamptonbrown.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3010
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/hamptonbrown.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
nqsltd.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3020
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/nqsltd.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
gregknoppcpa.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3030
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/gregknoppcpa.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
buddelectric.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3040
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/buddelectric.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip zstd
|
||||||
|
}
|
||||||
|
iitwelders.bayarea-cc.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:8080
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/iitwelders.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
fancytextstuff.com {
|
||||||
|
# wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
|
||||||
|
handle {
|
||||||
|
reverse_proxy host.docker.internal:3010
|
||||||
|
}
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/fancytext.log
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
www.fancytextstuff.com {
|
||||||
|
redir https://fancytextstuff.com{uri} permanent
|
||||||
|
}
|
||||||
|
auth.bizmatch.net {
|
||||||
|
reverse_proxy https://bizmatch-net.firebaseapp.com {
|
||||||
|
header_up Host bizmatch-net.firebaseapp.com
|
||||||
|
header_up X-Forwarded-For {remote_host}
|
||||||
|
header_up X-Forwarded-Proto {scheme}
|
||||||
|
header_up X-Real-IP {remote_host}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
gitea.bizmatch.net {
|
||||||
|
reverse_proxy gitea:3500
|
||||||
|
}
|
||||||
|
|
||||||
|
dev.bizmatch.net {
|
||||||
|
handle /pictures/* {
|
||||||
|
root * /home/aknuth/git/bizmatch-project/bizmatch-server
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
|
||||||
|
handle {
|
||||||
|
root * /home/aknuth/git/bizmatch-project/bizmatch/dist/bizmatch/browser
|
||||||
|
try_files {path} {path}/ /index.html
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/access.log {
|
||||||
|
roll_size 10MB
|
||||||
|
roll_keep 5
|
||||||
|
roll_keep_for 48h
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
encode gzip
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
api.bizmatch.net {
|
||||||
|
reverse_proxy host.docker.internal:3001 { # Neu: Proxy auf Prod-Port 3001
|
||||||
|
header_up X-Real-IP {http.request.header.CF-Connecting-IP}
|
||||||
|
header_up X-Forwarded-For {http.request.header.CF-Connecting-IP}
|
||||||
|
header_up X-Forwarded-Proto {http.request.header.X-Forwarded-Proto}
|
||||||
|
header_up CF-IPCountry {http.request.header.CF-IPCountry}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
mailsync.bizmatch.net {
|
||||||
|
reverse_proxy host.docker.internal:5000 {
|
||||||
|
header_up X-Real-IP {http.request.header.CF-Connecting-IP}
|
||||||
|
header_up X-Forwarded-For {http.request.header.CF-Connecting-IP}
|
||||||
|
header_up X-Forwarded-Proto {http.request.header.X-Forwarded-Proto}
|
||||||
|
header_up CF-IPCountry {http.request.header.CF-IPCountry}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Roundcube für docker-mailserver
|
||||||
|
app.email-bayarea.com {
|
||||||
|
reverse_proxy roundcube:80
|
||||||
|
|
||||||
|
log {
|
||||||
|
output stderr
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
# Roundcube für docker-mailserver
|
||||||
|
config.email-bayarea.com {
|
||||||
|
|
||||||
|
root * /home/aknuth/git/config-email/frontend/dist
|
||||||
|
try_files {path} {path}/ /index.html
|
||||||
|
file_server
|
||||||
|
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/config-email.log
|
||||||
|
}
|
||||||
|
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
# Roundcube für docker-mailserver
|
||||||
|
api.email-bayarea.com {
|
||||||
|
reverse_proxy host.docker.internal:3002
|
||||||
|
|
||||||
|
log {
|
||||||
|
output stderr
|
||||||
|
format console
|
||||||
|
}
|
||||||
|
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
annavillesda.org {
|
||||||
|
# API requests to backend
|
||||||
|
handle /api/* {
|
||||||
|
reverse_proxy host.docker.internal:3070
|
||||||
|
}
|
||||||
|
|
||||||
|
# Frontend static files
|
||||||
|
handle {
|
||||||
|
root * /home/aknuth/git/annaville-sda-site/dist
|
||||||
|
try_files {path} {path}/ /index.html
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
|
||||||
|
log {
|
||||||
|
output file /var/log/caddy/access.prod.log
|
||||||
|
}
|
||||||
|
|
||||||
|
encode gzip
|
||||||
|
}
|
||||||
|
www.annavillesda.org {
|
||||||
|
redir https://annavillesda.org{uri} permanent
|
||||||
|
}
|
||||||
|
# -----------------
|
||||||
|
# just for certificate generation
|
||||||
|
# -----------------
|
||||||
|
mail.andreasknuth.de {
|
||||||
|
reverse_proxy nginx-mailcow:8080
|
||||||
|
}
|
||||||
|
web.email-bayarea.com {
|
||||||
|
reverse_proxy nginx-mailcow:8080
|
||||||
|
}
|
||||||
|
# Dieser Block dient nur dazu, das Zertifikat für den Mailserver zu beschaffen/erneuern.
|
||||||
|
mail.email-srvr.com {
|
||||||
|
respond "Mailserver Certificate Authority is running." 200
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,13 @@
|
||||||
|
# Dockerfile.caddy
|
||||||
|
ARG CADDY_VERSION=2.9.1
|
||||||
|
|
||||||
|
FROM caddy:${CADDY_VERSION}-builder AS builder
|
||||||
|
# Caddy in exakt dieser Version + Plugins bauen
|
||||||
|
RUN xcaddy build ${CADDY_VERSION} \
|
||||||
|
--with github.com/caddy-dns/cloudflare \
|
||||||
|
--with github.com/caddyserver/replace-response
|
||||||
|
|
||||||
|
FROM caddy:${CADDY_VERSION}
|
||||||
|
COPY --from=builder /usr/bin/caddy /usr/bin/caddy
|
||||||
|
RUN mkdir -p /var/log/caddy
|
||||||
|
|
||||||
|
|
@ -0,0 +1,51 @@
|
||||||
|
services:
|
||||||
|
caddy:
|
||||||
|
image: custom-caddy:2.9.1-rr1
|
||||||
|
container_name: caddy
|
||||||
|
build:
|
||||||
|
context: .
|
||||||
|
dockerfile: Dockerfile.caddy
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
extra_hosts:
|
||||||
|
- 'host.docker.internal:host-gateway'
|
||||||
|
networks:
|
||||||
|
- bizmatch
|
||||||
|
- keycloak
|
||||||
|
- gitea
|
||||||
|
- mail_network
|
||||||
|
volumes:
|
||||||
|
- $PWD/Caddyfile:/etc/caddy/Caddyfile
|
||||||
|
- $PWD/email_autodiscover:/etc/caddy/email_autodiscover
|
||||||
|
- $PWD/email.mobileconfig.tpl:/etc/caddy/email.mobileconfig.tpl
|
||||||
|
- $PWD/email-setup:/var/www/email-setup
|
||||||
|
- caddy_data:/data
|
||||||
|
- caddy_config:/config
|
||||||
|
- /home/aknuth/git/bizmatch-project/bizmatch/dist/bizmatch/browser:/home/aknuth/git/bizmatch-project/bizmatch/dist/bizmatch/browser
|
||||||
|
- /home/aknuth/git/bizmatch-project-prod/bizmatch/dist/bizmatch/browser:/home/aknuth/git/bizmatch-project-prod/bizmatch/dist/bizmatch/browser
|
||||||
|
- /home/aknuth/git/bizmatch-project/bizmatch-server/pictures:/home/aknuth/git/bizmatch-project/bizmatch-server/pictures
|
||||||
|
- /home/aknuth/git/bizmatch-project-prod/bizmatch-server/pictures:/home/aknuth/git/bizmatch-project-prod/bizmatch-server/pictures
|
||||||
|
- /home/aknuth/git/annaville-sda-site/dist:/home/aknuth/git/annaville-sda-site/dist:ro # ← DAS FEHLT!
|
||||||
|
- /home/aknuth/git/bay-area-affiliates/dist/bay-area-affiliates/browser:/app
|
||||||
|
- /home/aknuth/log/caddy:/var/log/caddy
|
||||||
|
- /home/aknuth/git/config-email/frontend/dist:/home/aknuth/git/config-email/frontend/dist:ro
|
||||||
|
environment:
|
||||||
|
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
|
||||||
|
- CLOUDFLARE_EMAIL=${CLOUDFLARE_EMAIL}
|
||||||
|
|
||||||
|
networks:
|
||||||
|
bizmatch:
|
||||||
|
external: true
|
||||||
|
keycloak:
|
||||||
|
external: true
|
||||||
|
gitea:
|
||||||
|
external: true
|
||||||
|
mail_network:
|
||||||
|
external: true
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
caddy_data:
|
||||||
|
external: true
|
||||||
|
caddy_config:
|
||||||
|
|
@ -0,0 +1,29 @@
|
||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
|
||||||
|
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
|
||||||
|
<Account>
|
||||||
|
<AccountType>email</AccountType>
|
||||||
|
<Action>settings</Action>
|
||||||
|
<Protocol>
|
||||||
|
<Type>IMAP</Type>
|
||||||
|
<Server>mail.email-srvr.com</Server>
|
||||||
|
<Port>993</Port>
|
||||||
|
<DomainRequired>off</DomainRequired>
|
||||||
|
<LoginName></LoginName>
|
||||||
|
<SPA>off</SPA>
|
||||||
|
<SSL>on</SSL>
|
||||||
|
<AuthRequired>on</AuthRequired>
|
||||||
|
</Protocol>
|
||||||
|
<Protocol>
|
||||||
|
<Type>SMTP</Type>
|
||||||
|
<Server>mail.email-srvr.com</Server>
|
||||||
|
<Port>465</Port>
|
||||||
|
<DomainRequired>off</DomainRequired>
|
||||||
|
<LoginName></LoginName>
|
||||||
|
<SPA>off</SPA>
|
||||||
|
<SSL>on</SSL>
|
||||||
|
<AuthRequired>on</AuthRequired>
|
||||||
|
</Protocol>
|
||||||
|
</Account>
|
||||||
|
</Response>
|
||||||
|
</Autodiscover>
|
||||||
Binary file not shown.
|
After Width: | Height: | Size: 1.9 KiB |
|
|
@ -0,0 +1,122 @@
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>Email Setup</title>
|
||||||
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/qrcodejs/1.0.0/qrcode.min.js"></script>
|
||||||
|
<style>
|
||||||
|
body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; background: #f2f2f7; display: flex; justify-content: center; align-items: center; min-height: 100vh; margin: 0; padding: 20px; box-sizing: border-box; }
|
||||||
|
.card { background: white; padding: 2.5rem; border-radius: 24px; box-shadow: 0 12px 30px rgba(0,0,0,0.1); width: 100%; max-width: 420px; text-align: center; transition: all 0.3s ease; }
|
||||||
|
.logo { width: 80px; height: 80px; margin-bottom: 1.5rem; }
|
||||||
|
h1 { margin: 0 0 1rem 0; color: #1a1a1a; font-size: 1.8rem; }
|
||||||
|
p { color: #666; line-height: 1.5; margin-bottom: 2rem; }
|
||||||
|
|
||||||
|
/* Input Section */
|
||||||
|
#input-section { transition: opacity 0.3s ease; }
|
||||||
|
input { width: 100%; padding: 16px; margin-bottom: 16px; border: 2px solid #eee; border-radius: 14px; font-size: 16px; box-sizing: border-box; transition: border-color 0.2s; outline: none; }
|
||||||
|
input:focus { border-color: #007AFF; }
|
||||||
|
button { width: 100%; padding: 16px; background: #007AFF; color: white; border: none; border-radius: 14px; font-size: 18px; font-weight: 600; cursor: pointer; transition: background 0.2s, transform 0.1s; }
|
||||||
|
button:hover { background: #0062cc; }
|
||||||
|
button:active { transform: scale(0.98); }
|
||||||
|
|
||||||
|
/* QR Section (initially hidden) */
|
||||||
|
#qr-section { display: none; opacity: 0; transition: opacity 0.5s ease; }
|
||||||
|
#qrcode { margin: 2rem auto; padding: 15px; background: white; border-radius: 16px; box-shadow: 0 4px 12px rgba(0,0,0,0.08); display: inline-block; }
|
||||||
|
#qrcode img { margin: auto; } /* Centers the generated QR code */
|
||||||
|
|
||||||
|
.hint { font-size: 0.9rem; color: #888; margin-top: 1.5rem; }
|
||||||
|
.hint strong { color: #333; }
|
||||||
|
.error { color: #d32f2f; background: #fde8e8; padding: 10px; border-radius: 8px; font-size: 0.9rem; display: none; margin-bottom: 16px; }
|
||||||
|
.back-btn { background: transparent; color: #007AFF; margin-top: 1rem; font-size: 16px; }
|
||||||
|
.back-btn:hover { background: #f0f8ff; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<div class="card">
|
||||||
|
<img src="/logo.png" alt="Logo" class="logo">
|
||||||
|
|
||||||
|
<div id="input-section">
|
||||||
|
<h1>Email Setup</h1>
|
||||||
|
<p>Enter your email address to automatically configure your iPhone or iPad.</p>
|
||||||
|
|
||||||
|
<div id="error-msg" class="error">Please enter a valid email address.</div>
|
||||||
|
|
||||||
|
<input type="email" id="email" placeholder="name@company.com" required autocomplete="email">
|
||||||
|
<button onclick="generateQR()">Generate QR Code</button>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div id="qr-section">
|
||||||
|
<h1>Scan me!</h1>
|
||||||
|
<p>Open the <strong>Camera app</strong> on your iPhone and point it at this code.</p>
|
||||||
|
|
||||||
|
<div id="qrcode"></div>
|
||||||
|
|
||||||
|
<p class="hint">
|
||||||
|
Tap the banner that appears at the top.<br>
|
||||||
|
Click <strong>"Allow"</strong> and then go to <strong>Settings</strong> to install the profile.
|
||||||
|
</p>
|
||||||
|
<button class="back-btn" onclick="resetForm()">Back</button>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
const inputSection = document.getElementById('input-section');
|
||||||
|
const qrSection = document.getElementById('qr-section');
|
||||||
|
const emailInput = document.getElementById('email');
|
||||||
|
const errorMsg = document.getElementById('error-msg');
|
||||||
|
let qrcode = null;
|
||||||
|
|
||||||
|
function generateQR() {
|
||||||
|
const email = emailInput.value.trim();
|
||||||
|
|
||||||
|
if (!email || !email.includes('@') || email.split('@')[1].length < 3) {
|
||||||
|
errorMsg.style.display = 'block';
|
||||||
|
emailInput.focus();
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
errorMsg.style.display = 'none';
|
||||||
|
|
||||||
|
const domain = email.split('@')[1];
|
||||||
|
// The magic link
|
||||||
|
const targetUrl = `https://autodiscover.${domain}/apple?email=${email}`;
|
||||||
|
|
||||||
|
// Hide input, show QR
|
||||||
|
inputSection.style.display = 'none';
|
||||||
|
qrSection.style.display = 'block';
|
||||||
|
setTimeout(() => qrSection.style.opacity = '1', 50);
|
||||||
|
|
||||||
|
// Generate (or update) QR Code
|
||||||
|
if (qrcode === null) {
|
||||||
|
qrcode = new QRCode(document.getElementById("qrcode"), {
|
||||||
|
text: targetUrl,
|
||||||
|
width: 200,
|
||||||
|
height: 200,
|
||||||
|
colorDark : "#000000",
|
||||||
|
colorLight : "#ffffff",
|
||||||
|
correctLevel : QRCode.CorrectLevel.H
|
||||||
|
});
|
||||||
|
} else {
|
||||||
|
qrcode.clear();
|
||||||
|
qrcode.makeCode(targetUrl);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function resetForm() {
|
||||||
|
qrSection.style.opacity = '0';
|
||||||
|
setTimeout(() => {
|
||||||
|
qrSection.style.display = 'none';
|
||||||
|
inputSection.style.display = 'block';
|
||||||
|
emailInput.value = '';
|
||||||
|
emailInput.focus();
|
||||||
|
}, 300);
|
||||||
|
}
|
||||||
|
|
||||||
|
emailInput.addEventListener("keypress", function(event) {
|
||||||
|
if (event.key === "Enter") generateQR();
|
||||||
|
});
|
||||||
|
</script>
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
|
@ -0,0 +1,67 @@
|
||||||
|
<?xml version="1.0" encoding="UTF-8"?>
|
||||||
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
||||||
|
<plist version="1.0">
|
||||||
|
<dict>
|
||||||
|
<key>PayloadContent</key>
|
||||||
|
<array>
|
||||||
|
<dict>
|
||||||
|
<key>EmailAccountDescription</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>EmailAccountName</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>EmailAccountType</key>
|
||||||
|
<string>EmailTypeIMAP</string>
|
||||||
|
<key>EmailAddress</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>IncomingMailServerAuthentication</key>
|
||||||
|
<string>EmailAuthPassword</string>
|
||||||
|
<key>IncomingMailServerHostName</key>
|
||||||
|
<string>mail.email-srvr.com</string>
|
||||||
|
<key>IncomingMailServerPortNumber</key>
|
||||||
|
<integer>993</integer>
|
||||||
|
<key>IncomingMailServerUseSSL</key>
|
||||||
|
<true/>
|
||||||
|
<key>IncomingMailServerUsername</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>OutgoingMailServerAuthentication</key>
|
||||||
|
<string>EmailAuthPassword</string>
|
||||||
|
<key>OutgoingMailServerHostName</key>
|
||||||
|
<string>mail.email-srvr.com</string>
|
||||||
|
<key>OutgoingMailServerPortNumber</key>
|
||||||
|
<integer>465</integer>
|
||||||
|
<key>OutgoingMailServerUseSSL</key>
|
||||||
|
<true/>
|
||||||
|
<key>OutgoingMailServerUsername</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>PayloadDescription</key>
|
||||||
|
<string>E-Mail Konfiguration für {{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>PayloadDisplayName</key>
|
||||||
|
<string>{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>PayloadIdentifier</key>
|
||||||
|
<string>com.email-srvr.profile.{{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>PayloadType</key>
|
||||||
|
<string>com.apple.mail.managed</string>
|
||||||
|
<key>PayloadUUID</key>
|
||||||
|
<string>{{uuidv4}}</string>
|
||||||
|
<key>PayloadVersion</key>
|
||||||
|
<integer>1</integer>
|
||||||
|
</dict>
|
||||||
|
</array>
|
||||||
|
<key>PayloadDescription</key>
|
||||||
|
<string>Automatische E-Mail Einrichtung für {{.Req.URL.Query.Get "email"}}</string>
|
||||||
|
<key>PayloadDisplayName</key>
|
||||||
|
<string>E-Mail Einstellungen</string>
|
||||||
|
<key>PayloadIdentifier</key>
|
||||||
|
<string>com.email-srvr.profile.root</string>
|
||||||
|
<key>PayloadOrganization</key>
|
||||||
|
<string>IT Support</string>
|
||||||
|
<key>PayloadRemovalDisallowed</key>
|
||||||
|
<false/>
|
||||||
|
<key>PayloadType</key>
|
||||||
|
<string>Configuration</string>
|
||||||
|
<key>PayloadUUID</key>
|
||||||
|
<string>{{uuidv4}}</string>
|
||||||
|
<key>PayloadVersion</key>
|
||||||
|
<integer>1</integer>
|
||||||
|
</dict>
|
||||||
|
</plist>
|
||||||
|
|
@ -0,0 +1,97 @@
|
||||||
|
(email_settings) {
|
||||||
|
# 1. Autodiscover für Outlook
|
||||||
|
route /autodiscover/autodiscover.xml {
|
||||||
|
header Content-Type "application/xml"
|
||||||
|
# Wir nutzen {header.X-Anchormailbox} um die Email dynamisch einzufügen
|
||||||
|
respond `<?xml version="1.0" encoding="utf-8"?>
|
||||||
|
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
|
||||||
|
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
|
||||||
|
<Account>
|
||||||
|
<AccountType>email</AccountType>
|
||||||
|
<Action>settings</Action>
|
||||||
|
<Protocol>
|
||||||
|
<Type>IMAP</Type>
|
||||||
|
<Server>mail.email-srvr.com</Server>
|
||||||
|
<Port>993</Port>
|
||||||
|
<DomainRequired>on</DomainRequired>
|
||||||
|
<LoginName>{header.X-Anchormailbox}</LoginName>
|
||||||
|
<SPA>off</SPA>
|
||||||
|
<SSL>on</SSL>
|
||||||
|
<AuthRequired>on</AuthRequired>
|
||||||
|
</Protocol>
|
||||||
|
<Protocol>
|
||||||
|
<Type>POP3</Type>
|
||||||
|
<Server>mail.email-srvr.com</Server>
|
||||||
|
<Port>995</Port>
|
||||||
|
<DomainRequired>on</DomainRequired>
|
||||||
|
<LoginName>{header.X-Anchormailbox}</LoginName>
|
||||||
|
<SPA>off</SPA>
|
||||||
|
<SSL>on</SSL>
|
||||||
|
<AuthRequired>on</AuthRequired>
|
||||||
|
</Protocol>
|
||||||
|
<Protocol>
|
||||||
|
<Type>SMTP</Type>
|
||||||
|
<Server>mail.email-srvr.com</Server>
|
||||||
|
<Port>465</Port>
|
||||||
|
<DomainRequired>on</DomainRequired>
|
||||||
|
<LoginName>{header.X-Anchormailbox}</LoginName>
|
||||||
|
<SPA>off</SPA>
|
||||||
|
<SSL>on</SSL>
|
||||||
|
<AuthRequired>on</AuthRequired>
|
||||||
|
</Protocol>
|
||||||
|
</Account>
|
||||||
|
</Response>
|
||||||
|
</Autodiscover>` 200
|
||||||
|
}
|
||||||
|
|
||||||
|
# 2. JSON Autodiscover (Modern Outlook) - bleibt gleich
|
||||||
|
route /autodiscover/autodiscover.json {
|
||||||
|
header Content-Type "application/json"
|
||||||
|
respond `{
|
||||||
|
"Protocol": "AutodiscoverV1",
|
||||||
|
"Url": "https://autodiscover.bayarea-cc.com/autodiscover/autodiscover.xml"
|
||||||
|
}` 200
|
||||||
|
}
|
||||||
|
|
||||||
|
# 3. Thunderbird Autoconfig - bleibt gleich (dort funktioniert %EMAILADDRESS% ja nativ)
|
||||||
|
route /mail/config-v1.1.xml {
|
||||||
|
header Content-Type "application/xml"
|
||||||
|
respond `<?xml version="1.0"?>
|
||||||
|
<clientConfig version="1.1">
|
||||||
|
<emailProvider id="email-srvr.com">
|
||||||
|
<displayName>Rackspace Email</displayName>
|
||||||
|
<incomingServer type="imap">
|
||||||
|
<hostname>mail.email-srvr.com</hostname>
|
||||||
|
<port>993</port>
|
||||||
|
<socketType>SSL</socketType>
|
||||||
|
<authentication>password-cleartext</authentication>
|
||||||
|
<username>%EMAILADDRESS%</username>
|
||||||
|
</incomingServer>
|
||||||
|
<outgoingServer type="smtp">
|
||||||
|
<hostname>mail.email-srvr.com</hostname>
|
||||||
|
<port>465</port>
|
||||||
|
<socketType>SSL</socketType>
|
||||||
|
<authentication>password-cleartext</authentication>
|
||||||
|
<username>%EMAILADDRESS%</username>
|
||||||
|
</outgoingServer>
|
||||||
|
</emailProvider>
|
||||||
|
</clientConfig>` 200
|
||||||
|
}
|
||||||
|
|
||||||
|
# NEU: Apple MobileConfig Route
|
||||||
|
# Aufrufbar über: /apple?email=kunde@domain.de
|
||||||
|
route /apple {
|
||||||
|
# KORREKTUR: Wir müssen Caddy sagen, dass er diesen MIME-Type bearbeiten soll!
|
||||||
|
templates {
|
||||||
|
mime "application/x-apple-aspen-config"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Den richtigen MIME-Type setzen
|
||||||
|
header Content-Type "application/x-apple-aspen-config; charset=utf-8"
|
||||||
|
|
||||||
|
# Pfad zur Datei im Container
|
||||||
|
root * /etc/caddy
|
||||||
|
rewrite * /email.mobileconfig.tpl
|
||||||
|
file_server
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue