serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Improve caddy config for general wildcard

Browse source
This commit is contained in:
Tobias Reisinger 2025-04-29 11:53:24 +02:00
parent 654b7c18b1
commit 43045d868a
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
3 changed files with 15 additions and 3 deletions
dnsconfig.js
playbooks/roles/caddy
files
snippets
templates
Caddyfile.j2

4
dnsconfig.js
View file

@ -65,9 +65,7 @@ D("serguzim.me", REG_OVH, DnsProvider(DSP_OVH),
acme_challenge("auth", "18a42983-3d19-4c17-8213-fc275a8be721"), acme_challenge("auth", "18a42983-3d19-4c17-8213-fc275a8be721"),
acme_challenge("db", "ca2c86c0-ff3d-458a-89e0-11bcfd2543e4"), acme_challenge("db", "ca2c86c0-ff3d-458a-89e0-11bcfd2543e4"),
acme_challenge("paas", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"), acme_challenge("", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"),
acme_challenge("alloy", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"),
acme_challenge("mimir", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"),
verify_amazon_ses(dkim_ses["serguzim.me"]), verify_amazon_ses(dkim_ses["serguzim.me"]),

7
playbooks/roles/caddy/files/snippets
View file

@ -44,3 +44,10 @@
} }
} }
} }
(vpn_only) {
@denied not client_ip private_ranges
handle @denied {
redir https://www.serguzim.me/
}
}

7
playbooks/roles/caddy/templates/Caddyfile.j2
View file

@ -8,4 +8,11 @@
} }
import /etc/caddy/snippets import /etc/caddy/snippets
*.serguzim.me {
import acmedns
redir https://www.serguzim.me/
}
import /etc/caddy/conf.d/*.conf import /etc/caddy/conf.d/*.conf