caddy: sync host/caddy mirror with full vhost map
host/caddy/Caddyfile was stale (Taler-only). Align with configs/caddy including git.hacktivism.ch :9024 and forgejo-ssh note :9200.
This commit is contained in:
parent
b674e57f4e
commit
02c5f97645
2 changed files with 158 additions and 53 deletions
|
|
@ -1,6 +1,19 @@
|
|||
# Caddy (host reverse proxy)
|
||||
# Host Caddy
|
||||
|
||||
- Config: `Caddyfile` (also mirrored under `configs/caddy/`)
|
||||
- TLS certs on disk: `/etc/caddy/certs/{taler,exchange}.hacktivism.ch/`
|
||||
- HTTP 9000: ACME webroot `/var/www/acme` + redirect to HTTPS
|
||||
- HTTPS 9001: vhosts → backends 9010 / 9011
|
||||
Live: `/etc/caddy/Caddyfile` on koopa (root/`caddy` group).
|
||||
Canonical mirror in this repo: **`configs/caddy/Caddyfile`** (same content as `host/caddy/Caddyfile`).
|
||||
|
||||
| Listen | Role |
|
||||
|--------|------|
|
||||
| **9000** | HTTP + ACME webroot + HTTPS redirect |
|
||||
| **9001** | HTTPS vhosts |
|
||||
|
||||
Public sites: `taler` / `exchange` / `bank` / `castopod` / `bonfire` / `prime` / `bt` / **`git`**.
|
||||
Forgejo HTTP: Caddy → `127.0.0.1:9024`. Git SSH is **host :9200** (not Caddy).
|
||||
|
||||
Validate/reload on host:
|
||||
|
||||
```bash
|
||||
sudo caddy validate --config /etc/caddy/Caddyfile
|
||||
sudo systemctl reload caddy
|
||||
```
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue