infrastructure/playbooks/roles/caddy/files/snippets

37 lines
663 B
Text

(default) {
encode zstd gzip
}
(acmedns) {
tls {
dns acmedns {
username "{$ACMEDNS_USER}"
password "{$ACMEDNS_PASS}"
subdomain "{$ACMEDNS_SUBD}"
server_url "{$ACMEDNS_URL}"
}
}
}
(faas) {
rewrite * /function/{args[0]}{uri}
reverse_proxy https://faas.serguzim.me {
header_up Host {http.reverse_proxy.upstream.hostport}
}
}
(analytics) {
handle_path /_a/* {
reverse_proxy https://analytics.serguzim.me {
header_up X-Analytics-IP {remote_host}
header_up Host {http.reverse_proxy.upstream.hostport}
}
}
}
(vpn_only) {
@denied not client_ip private_ranges
handle @denied {
redir https://www.serguzim.me/
}
}