rocksky/Caddyfile at main · tsirysndr/rocksky · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
{
	email tsiry.sndr@rocksky.app
	on_demand_tls {
		ask http://localhost:3000/tls-check
	}
}

*.pds.rocksky.app, pds.rocksky.app {
	tls {
		on_demand
	}

	header {
		Access-Control-Allow-Origin *

		# Set HSTS
		Strict-Transport-Security "max-age=63072000"

		# Remove unwanted headers from Caddy
		-Server
		-X-Content-Type-Options
		-X-Frame-Options
		-X-XSS-Protection
		-Referrer-Policy
		-Content-Security-Policy

		Vary Origin
	}

	reverse_proxy http://localhost:3000
}

api.rocksky.app {
	handle /xrpc/* {
		reverse_proxy http://localhost:3004
	}

	handle {
		reverse_proxy http://localhost:8000
	}
}

audioscrobbler.rocksky.app {
	reverse_proxy http://localhost:7882
}

webscrobbler.rocksky.app {
	reverse_proxy http://localhost:7883
}

grafana.rocksky.app {
	reverse_proxy http://localhost:3001
}

meilisearch.rocksky.app {
	reverse_proxy http://localhost:7700
}