path: root/etc/Caddyfile

:80 {
        root * /usr/share/caddy
        file_server
}
gitrepo.ru {
        reverse_proxy forgejo_server:3000
}
ci.gitrepo.ru {
        reverse_proxy woodpecker_server:8000
}

gist.neonxp.ru {
        reverse_proxy opengist_server:6157
}

comments.neonxp.ru {
        reverse_proxy remark_server:8080
}

# goproxy.ru {
#       reverse_proxy localhost:8081
# }

go.neonxp.dev {
        reverse_proxy goproxy_server:8080
}

go.neonxp.ru {
        reverse_proxy goproxy_server:8080
}

nquest.ru {
        reverse_proxy nquest_server:8080
}

# idec.neonxp.dev {
#         reverse_proxy iigo:8080
# }

neonxp.dev {
        redir https://neonxp.ru
}

neonxp.ru:80 {
        encode gzip
        root * /var/www/neonxp.dev/public
        file_server
        header / {
                cache-control = "max-age=0,no-cache,no-store,must-revalidate"
        }
        log {
                output file /var/log/caddy/neonxp.dev/neonxp.dev.log
        }
}

neonxp.ru:443 {
        tls /data/ssl/chain.cer /data/ssl/neonxp.ru.key
        encode gzip
        root * /var/www/neonxp.dev/public
        file_server
        header / {
                cache-control = "max-age=0,no-cache,no-store,must-revalidate"
        }
        log {
                output file /var/log/caddy/neonxp.dev/neonxp.dev.log
        }
}

timer.neonxp.dev {
        tls i@neonxp.dev
        encode gzip
        root * /var/www/timer.neonxp.dev
        file_server
        header / {
                Content-Security-Policy = "upgrade-insecure-requests; default-src 'self'; style-src 'self'; script-src 'self'; img-src 'self'; object-src 'self'; worker-src 'self'; manifest-src 'self';"
                Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
                X-Xss-Protection = "1; mode=block"
                X-Frame-Options = "DENY"
                X-Content-Type-Options = "nosniff"
                Referrer-Policy = "strict-origin-when-cross-origin"
                Permissions-Policy = "fullscreen=(self)"
                cache-control = "max-age=0,no-cache,no-store,must-revalidate"
        }
        log {
                output file /var/log/caddy/neonxp.dev/timer.neonxp.dev.log
        }
}

# https://caddyserver.com/docs/caddyfile